quixel-bridge-blender

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

• PKGBUILD:12 source=("https://quixel-megascans-static.s3.us-west-2.amazonaws.com/bridge/plugins_12/blender/linux/${pkgver}.zip")

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 72%): The source is a prebuilt plugin zip pulled from an AWS S3 bucket (quixel-megascans-static.s3.us-west-2.amazonaws.com) that belongs to Quixel/Epic Games, the official vendor of Quixel Bridge. This is not a random personal host — Quixel is the legitimate upstream and S3 is a common CDN for official vendor assets. However, the concern is real: S3 buckets are not immutable; the content at that URL could be replaced without changing the URL, and there is no GPG signature or other out-of-band verification. The sha256sum provides integrity checking against the originally captured hash, which mitigates accidental substitution but not a deliberate upstream swap. The installed artifact is a Python file (__init__.py) placed into Blender's startup scripts directory, meaning it executes automatically on every Blender launch — making the impact of any compromise high. On balance: the host is plausibly official (Quixel's own S3 bucket), the sha256 is present, but the lack of a signed release and the auto-execution of the installed Python code keeps this at medium rather than clean.