skwd-lens

LOW

maintainer liixini 0 votes base skwd-wall-v2 scanned 2026-09-02 03:51:27.672406

View on AUR

Why flagged

Source is a Fedora COPR SRPM (a plausible project-owned build infrastructure for the same maintainer 'piixini'), has a proper sha256 checksum, and the build compiles from source using the project's own build scripts; the .install hook only manages a systemd user service lifecycle, no exfiltration or remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): Source is a Fedora COPR SRPM (a plausible project-owned build infrastructure for the same maintainer 'piixini'), has a proper sha256 checksum, and the build compiles from source using the project's own build scripts; the .install hook only manages a systemd user service lifecycle, no exfiltration or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("skwd-suite-1.0.0~beta.1-4.fc44.src.rpm::https://download.copr.fedorainfracloud.org/results/piixini/skwd-wall-v2/srpm-builds/10933309/skwd-suite-1.0.0beta.1-4.fc44.src.rpm")

PKGBUILD

1 offending line(s) highlighted

      1pkgbase=skwd-wall-v2
    
      2pkgname=(skwd-wall-v2 skwd-deck skwd-paper skwd-lens)
    
      3pkgver=1.0.0_beta.1
    
      4pkgrel=1
    
      5pkgdesc='Native Skwd wallpaper suite v2 packages'
    
      6arch=(x86_64)
    
      7url='https://github.com/liixini/skwd-wall/tree/v2'
    
      8license=(GPL-3.0-or-later)
    
      9makedepends=(
    
      10  cargo clang cmake gcc pkgconf curl nasm patchelf
    
      11  alsa-lib dav1d libdrm libglvnd libpulse libva libxkbcommon libyuv zlib
    
      12  qt6-base qt6-declarative shaderc vulkan-headers vulkan-icd-loader wayland wayland-protocols
    
      13)
    
      14options=(!debug !lto)
    
      15source=("skwd-suite-1.0.0~beta.1-4.fc44.src.rpm::https://download.copr.fedorainfracloud.org/results/piixini/skwd-wall-v2/srpm-builds/10933309/skwd-suite-1.0.0beta.1-4.fc44.src.rpm")
    
      16sha256sums=('0328cd4c438542ae5068007a7b288bccaa71004fad3c7d2959f991bb575437f6')
    
      17
    
      18prepare() {
    
      19  bsdtar -xf "$srcdir/skwd-suite-1.0.0~beta.1-4.fc44.src.rpm" -C "$srcdir"
    
      20  bsdtar -xf "$srcdir/skwd-suite-1.0.0-beta.1.tar.xz" -C "$srcdir"
    
      21}
    
      22
    
      23build() {
    
      24  cd "skwd-suite-1.0.0-beta.1"
    
      25  export CARGO_PROFILE_RELEASE_STRIP=symbols
    
      26  ./distribution/build.sh all
    
      27}
    
      28
    
      29package_skwd-wall-v2() {
    
      30  pkgdesc='GPU-rendered graphical client for the Skwd wallpaper suite v2'
    
      31  depends=(gcc-libs libxkbcommon skwd-deck="$pkgver" skwd-paper="$pkgver" vulkan-icd-loader wayland)
    
      32  optdepends=('skwd-lens: semantic wallpaper search')
    
      33  cd "skwd-suite-1.0.0-beta.1"
    
      34  ./distribution/install.sh wall "$pkgdir"
    
      35}
    
      36
    
      37package_skwd-deck() {
    
      38  pkgdesc='Control daemon and tools for the Skwd wallpaper suite v2'
    
      39  install=skwd-deck.install
    
      40  depends=(gcc-libs skwd-paper="$pkgver")
    
      41  optdepends=(
    
      42    'skwd-deck-steamworks: Steam Client Workshop backend'
    
      43    'skwd-lens: semantic wallpaper search'
    
      44    'steamcmd: alternative Steam Workshop backend'
    
      45  )
    
      46  cd "skwd-suite-1.0.0-beta.1"
    
      47  ./distribution/install.sh deck "$pkgdir"
    
      48}
    
      49
    
      50package_skwd-paper() {
    
      51  pkgdesc='Still, video, and Wallpaper Engine renderers for Skwd v2'
    
      52  depends=(alsa-lib dav1d gcc-libs libdrm libglvnd libpulse libva libxkbcommon libyuv qt6-declarative shaderc vulkan-icd-loader wayland zlib)
    
      53  cd "skwd-suite-1.0.0-beta.1"
    
      54  ./distribution/install.sh paper "$pkgdir"
    
      55}
    
      56
    
      57package_skwd-lens() {
    
      58  pkgdesc='Optional semantic wallpaper search engine for Skwd v2'
    
      59  depends=(gcc-libs skwd-lens-model)
    
      60  cd "skwd-suite-1.0.0-beta.1"
    
      61  ./distribution/install.sh lens "$pkgdir"
    
      62}
    
      63

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-02 03:51:27	Low	3
2026-09-02 03:49:31	Medium	3