scout-agentgateway-extmcp

CLEAN

maintainer srousseau 0 votes scanned 2026-09-27 00:07:07.510666

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a source tarball hosted on GitHub at a project URL plausibly owned by the maintainer, uses standard Go build practices, and installs only the resulting binary and documentation; the flagged low-vote and recent-upload heuristics do not indicate actual malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Sebastien Rousseau <sebastian.rousseau@gmail.com>
    
      2
    
      3pkgname=scout-agentgateway-extmcp
    
      4_repo=scout-reporting
    
      5pkgver=0.0.7
    
      6pkgrel=1
    
      7pkgdesc='agentgateway ExtMcp processor that gates MCP backends on offline-verified scout attestations'
    
      8arch=('x86_64' 'aarch64')
    
      9url='https://github.com/sebastienrousseau/scout-reporting/tree/main/integrations/agentgateway-extmcp'
    
      10license=('Apache-2.0')
    
      11depends=('glibc')
    
      12makedepends=('go')
    
      13source=("${_repo}-${pkgver}.tar.gz::https://github.com/sebastienrousseau/${_repo}/archive/refs/tags/v${pkgver}.tar.gz")
    
      14sha256sums=('b964f808c0ccf0f8ea8678761d9f066ea24f7ee43be4e0cf0c36b2dedc7f71be')
    
      15
    
      16prepare() {
    
      17  cd "${_repo}-${pkgver}/integrations/agentgateway-extmcp"
    
      18  export GOPATH="${srcdir}/gopath"
    
      19  go mod download -x
    
      20}
    
      21
    
      22build() {
    
      23  # Built from the whole source tree, so the module builds against the
    
      24  # verifier at the same release.
    
      25  cd "${_repo}-${pkgver}/integrations/agentgateway-extmcp"
    
      26  export GOPATH="${srcdir}/gopath"
    
      27  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      28  export CGO_CFLAGS="${CFLAGS}"
    
      29  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      30  export CGO_LDFLAGS="${LDFLAGS}"
    
      31  export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
    
      32  go build -o agentgateway-extmcp -ldflags "-linkmode=external" ./cmd/agentgateway-extmcp
    
      33}
    
      34
    
      35package() {
    
      36  cd "${_repo}-${pkgver}"
    
      37  install -Dm755 integrations/agentgateway-extmcp/agentgateway-extmcp "${pkgdir}/usr/bin/agentgateway-extmcp"
    
      38  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      39  install -Dm644 integrations/agentgateway-extmcp/README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      40  install -Dm644 integrations/agentgateway-extmcp/example/config.json "${pkgdir}/usr/share/doc/${pkgname}/example/config.json"
    
      41}
    
      42

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 00:07:07	Clean	2
2026-09-26 11:15:02	Low	1