{ "llm": { "conf": 0.08898358, "grade": "benign", "model": "Qwen/Qwen3.8-27B", "outcome": "benign", "interpretation": "Standard AUR package build script" }, "ml": { "v": "7", "eng": "2.8.0-beta.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.13281132, "rte": "az", "prob": 0.13281132 }, { "cls": 0, "raw": 0.008471171, "rte": "az/tar", "prob": 0.008471171 } ], "prob": 0.13281132, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.13281132280826569, "type": "tar.gz" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000011175870895385742, "type": "shell" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000006020069122314453, "type": "registry" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000007063150405883789, "type": "registry" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000006020069122314453, "type": "registry" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000006020069122314453, "type": "registry" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.000006020069122314453, "type": "registry" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000006020069122314453, "type": "registry" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000006020069122314453, "type": "registry" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.000006020069122314453, "type": "registry" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000006020069122314453, "type": "registry" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.000007063150405883789, "type": "registry" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000006020069122314453, "type": "registry" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.000006020069122314453, "type": "registry" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.000007063150405883789, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-08-21T12:34:59Z" }, "path": "openwork-0.18.34-1.src.tar.gz", "raw": { "fetched": [ { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/gtk3", "outcome": "unresolved", "fetched_at": 0, "source_offset": 209, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/nss", "outcome": "unresolved", "fetched_at": 0, "source_offset": 225, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/alsa-lib", "outcome": "unresolved", "fetched_at": 0, "source_offset": 240, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/libxss", "outcome": "unresolved", "fetched_at": 0, "source_offset": 260, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/libxtst", "outcome": "unresolved", "fetched_at": 0, "source_offset": 278, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/xdg-utils", "outcome": "unresolved", "fetched_at": 0, "source_offset": 297, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/at-spi2-core", "outcome": "unresolved", "fetched_at": 0, "source_offset": 318, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/libdrm", "outcome": "unresolved", "fetched_at": 0, "source_offset": 342, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/libxkbcommon", "outcome": "unresolved", "fetched_at": 0, "source_offset": 360, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/mesa", "outcome": "unresolved", "fetched_at": 0, "source_offset": 384, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/dbus", "outcome": "unresolved", "fetched_at": 0, "source_offset": 400, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" }, { "kind": "dependency", "cached": false, "locator": "pkg:alpm/arch/hicolor-icon-theme", "outcome": "unresolved", "fetched_at": 0, "source_offset": 416, "source_sha256": "c911e31ec3bb42b397f161b8a84c85c99e721346d5b8506c05dbc010744c64c0" } ], "files": [ { "id": 0, "ctx": [ { "b": "abZy80000000zQ\u003czeXe!5ye[\u003es8.]-b?(\u003cjfp5fae%XJZ7ozkdhO?N[lQjIkl%7iZL1IkV0RN=i3?)qqLX6Upfyvt3.+/e9Le(RM)S-@p(\u0026G#eL8LeQj4?2.SmXRf(h?bPp(N:abw^h}ps5ON=VpbE2FPl)X=", "n": [ { "c": 2, "d": "GZIP compressed file magic", "i": "metadata/file/magic/identity::gzip", "o": 0, "z": 8, "cf": 1.0 } ], "ln": 0 } ], "mol": "H₃(CmF₂Os)Md(Bk)", "sha": "15c95b17bd5747bd7d17ecd3702d85fdb141203adbed581e8b4ddfe1d20d9e5a", "path": "openwork-0.18.34-1.src.tar.gz", "risk": 5, "size": 1593, "type": "tar.gz", "facts": { "metrics": { "file": { "size": 1593.0, "entropy": 7.87, "size_bytes": 1593.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.87, "peak_region_bytes": 1593.0, "peak_region_entropy": 7.78 } } }, "ident": { "name": { "value": "openwork", "source": "file.basename", "verified": false }, "trust": "unsigned", "version": { "value": "0.18.34-1.src", "source": "file.basename", "verified": false } }, "traits": [ { "id": "micro-behaviors/fs/chmod/modify::chmod-setuid-numeric-mode", "atk": "T1222", "mbc": "E1222", "conf": 0.9, "crit": 3, "desc": "chmod sets a SUID numeric mode", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64", "conf": 0.94, "crit": 1, "desc": "x86 or AMD64 architecture reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-arm", "conf": 0.94, "crit": 1, "desc": "x86 or ARM architecture reference", "from": [ { "file": 1 } ] }, { "id": "metadata/build/package/recipe::pkgbuild-architecture-checksum-arrays", "conf": 0.95, "crit": 3, "desc": "PKGBUILD defines architecture checksum arrays", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::arch-arm64", "conf": 1.0, "crit": 1, "desc": "arm64 architecture string", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references", "conf": 0.94, "crit": 3, "desc": "References multiple CPU architecture names", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/chmod/modify::chmod-command", "atk": "T1222", "mbc": "E1222", "conf": 0.6, "crit": 3, "desc": "chmod shell command", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::arch-aarch64", "conf": 1.0, "crit": 1, "desc": "AArch64 (ARM64) architecture string", "from": [ { "file": 1 } ] }, { "id": "metadata/file/string/identity::multi-architecture-name-set--other", "conf": 0.9, "crit": 1, "desc": "CPU architecture family (other targets)", "from": [ { "file": 1 } ] }, { "id": "metadata/build/package/recipe::pkgbuild-carch-case", "conf": 0.95, "crit": 3, "desc": "PKGBUILD branches on CARCH", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/link/symlink::shell-ln-symlink", "conf": 0.88, "crit": 3, "desc": "Shell creates a symbolic link", "from": [ { "file": 1 } ] }, { "id": "metadata/file/string/identity::multi-architecture-name-set--arm-mips", "conf": 0.9, "crit": 1, "desc": "CPU architecture family (ARM and MIPS)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multi-arch-target", "atk": "T1082", "mbc": "Discovery", "conf": 0.85, "crit": 3, "desc": "Script targets multiple CPU architectures", "from": [ { "off": 1038, "file": 1, "line": 19 } ] }, { "id": "metadata/build/package/recipe::multiple-pkgbuild-recipes", "conf": 0.99, "crit": 3, "desc": "Multiple PKGBUILD recipe variants" } ] }, { "ctx": [ { "b": "boP@Oo\u0026aIHr7d}?FrRf#xK@q@z/6u9BAz88ay/teC{3*xaz$+lwPw]lwO+{^B7D}AAaJJ[w[+:caxi2=aAz4fwNPT\u003e3l{Wqz/PS9y\u0026sIuA+fc0wPz\u0026mAbf9fwPw[zaAIj8gbQ$hB.#gxC4\u003ewcB7ol8AccdOvrDPzB-p(1By^4jB-G9QxDR2baARpd3l{VXnG-j}A+/-nvpJ\u003c\u003evqYP#AclknwPF#oxK@rbwPJ0gBrCWzayPzke[5^gxL.y2B:bJSA+uIkzFTOJavP*PBrCWsx(:Raazbt7wGUP6AV/sfv@2H=x(mMay\u0026r%2v\u003c2n{vqYZ?B2$HZwP?T9ay/tbze18mvixP4vqE6fwPz\u003caz/cXhwPzum3uf=[zEEx[j-tpJzG*2tyyk2@xlE\u003cbjUOGyi4^0y3uf=[AS", "n": [ { "c": 3, "d": "Recognized OS-specific execution marker", "i": "objectives/execution/condition/platform::os-specific-execution-recognized-marker", "o": 0, "z": 8, "cf": 0.8 }, { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-1", "o": 15, "z": 3, "cf": 0.8 }, { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-2", "o": 164, "z": 3, "cf": 0.8 }, { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-5", "o": 230, "z": 3, "cf": 0.8 }, { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english--atom-7", "o": 218, "z": 4, "cf": 0.8 } ], "ln": 0, "col": 1, "line": 1 }, { "b": "wg!jdyIdf?B7muSl2E/vAaJ]fB8Mhwv}u=\u003ey\u0026\u003clezEET3C4z!rzY?z-vrD9(avy6\u003ez/PRq3sN%+xGW:\u003eCSmP*hz=^7cT*C7v}W+ScN/yBA+)(.xMOunB2\u003e%cxk8E3BZ=$kz/4drx\u003ey%*A+fcgeN-uDz/xo9Cw?Iqa{@d2v}xL0wJ.B?o?wqidgfP%AaJ]$B3g{0xlm]BcM\u003c^OB8@YKcT*?jvj=qfvKAoCy?Wv6B8@YKcV0HaCYX1GcM\u003c^Ywm)GpBzkMjcM\u003c^BBs?MMx!?nIz/Pzpasy#tvQ%H@cM\u003c=", "n": [ { "c": 3, "d": "References a public code-forge URL", "i": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "o": 528, "z": 19, "cf": 0.9 }, { "c": 3, "d": "Script targets multiple CPU architectures", "i": "micro-behaviors/os/sysinfo/platform/arch::multi-arch-target", "o": 513, "z": 7, "cf": 0.85 }, { "c": 3, "d": "References multiple CPU architecture names", "i": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references", "o": 504, "z": 6, "cf": 0.94 }, { "c": 1, "d": "Architecture parameter assignment", "i": "micro-behaviors/os/sysinfo/platform/arch::architecture-parameter-assignment", "o": 497, "z": 5, "cf": 0.94 } ], "ln": 440, "col": 116, "line": 7 }, { "b": "B3g]{B98CpA48b3boPo)v}YN#wN/?8A+c?zAaJJ[w[+-$B8Mhwv}xZ7vqYP#v}YB-yJBSnA%=#bB-H#6uWaK*uP6-7c)x{-Abf97vqPO7eHkWZyId*4A^YJ:hz^4dvr9#kDoa8jDV:vBEj]RLy?m3@wPGInz*c8nz^^ffB%IANyId*4A^YPVAaJ{hz/PRBy?W^fCRad#g+x#1Abf9fwPAhKByxhxxl\u003e:J3uG(?gbQ$hB.#hbCSmP*hz^MBcT[[(vR4u7fK[Q4wmvMci51]5fK!MGhzFY2iwUh3vQS+TvMln9h!3qLvMlwbw[9\u0026ii59fAfG7.0gb-Y6f^!yS3uHcdA:@V/vpsg^xF}Xgc)x{-Abf97vqPO7eHkWZyId*4A^YJFA=0Y\u003ee{7Jxe[YF\u003eiWx5{A+{dSA+f5#vrl13fjY0BzFTl1wg@9KDVi+kC4CYxfk\u003e/vzG*2tyB%vpzGQgQvrciyg+x#1Abf9fwPAhKByxhxxl\u003e:J3uG(?gbQ$hB.#hbvpsg^xF}Xgc)@N=i5iuEh83^%f/p\u003cHgbit@vQ}f3vpq66w?VhMvQ}eGhdy8LggJjOf\u003es=Hgb7Esf/0uMf!\u003eBvgCAxKiwq*f3jp-Xv@2H=wHF#IDKp(rv}lYabZTPMv}op]EiG19arUGsv{%f@vS=N0y?l%:x(TL6ay!\u00263wGSfxDQy7%lR8RHazCZ2arR^HCSmP*hz=\u0026\u0026arR^HarUcozE^M{uU0\u003e\u003ejTa/-wO#ZgA+^myx(n6reQffgeHkWZyId*4A^YbsarR^HarS:c3lQDlayOY0v}W+SdgdguarR^HvS=N0y?l%:x(VuXz/xo9Cw?IqeO]csB:bGDA=0Y\u003eeHkWZyId!", "n": [ { "c": 3, "d": "PKGBUILD defines architecture checksum arrays", "i": "metadata/build/package/recipe::pkgbuild-architecture-checksum-arrays", "o": 912, "z": 19, "cf": 0.95 }, { "c": 3, "d": "PKGBUILD branches on CARCH", "i": "metadata/build/package/recipe::pkgbuild-carch-case", "o": 1266, "z": 20, "cf": 0.95 }, { "c": 3, "d": "Shell lists architecture selector names", "i": "micro-behaviors/os/sysinfo/platform/string::multi-arch-runtime-wordlist", "o": 795, "z": 7, "cf": 0.85 }, { "c": 2, "d": "Multiple SHA-256 digest string literals", "i": "metadata/file/encoded::sha256-digest-literals", "o": 932, "z": 64, "cf": 0.85 }, { "c": 2, "d": "Shell changes working directory", "i": "micro-behaviors/fs/directory/chdir::shell-change-directory", "o": 1231, "z": 2, "cf": 0.95 }, { "c": 1, "d": "PKGBUILD defines a package() function", "i": "metadata/build/package/recipe::pkgbuild-package-fn", "o": 1216, "z": 10, "cf": 0.9 }, { "c": 1, "d": "References a compressed archive extension", "i": "micro-behaviors/data/archive/extension::archive-extension-reference", "o": 902, "z": 7, "cf": 0.8 }, { "c": 1, "d": "References a .tar.gz or .zip archive", "i": "micro-behaviors/data/archive/extension::tar-gz-or-zip-text", "o": 830, "z": 6, "cf": 0.9 }, { "c": 1, "d": "arm64 architecture string", "i": "micro-behaviors/os/sysinfo/platform/arch::arch-arm64", "o": 1038, "z": 5, "cf": 1.0 }, { "c": 1, "d": "Regex component marker", "i": "objectives/command-and-control/dropper/delivery/fetch-exec::arch-args-misc--rx-25", "o": 826, "z": 3, "cf": 0.95 } ], "ln": 731, "col": 7, "line": 13 }, { "b": "ar\u003c*6B9hCvz/P@hwftr3v}YN#wN/?8A+doObZR)AqBs06a%o5@g72cDarR^HA+funA=90O3lQDlarR^*i%)8MwPIo\u00263jm)#x(n0lvqG:5eO2$FbZTGCxjLZ%Ej]ITBt4MKwO#ZgA+=\u003caarUfkat41Aa%.IAB-7-awNw$ZA^YO[a%n6PDVi+kwnc7jfk\u003e/Kfk\u003e/vzG*2tyCc\u003es3lQE9zGx]dy?$jCwfr6wDVi+kwnc7jflItRfjFTka{]Cny\u0026gvEB09bOAc9:KAaJ{hz/PRDkYpQMzG*2tyH?0$yJKGlar\u00267TAbf8%x(XRPB-RNRvRGZkz/xo9Cw?Iqa{[V1azC.mByx04at2##hz^lka%.IOyIdf(A^YPVAc9:KAaJ{hz/PRDA+frgB-H#6B1Z%vA4LQmB966NAaJ{hz/PRBy\u0026r%8ePU]Ovrb{iB9qguay2l@arR^JbZTGCxjLZ%Ej].:AXzF", "n": [ { "c": 3, "d": "Shell creates a symbolic link", "i": "micro-behaviors/fs/link/symlink::shell-ln-symlink", "o": 1643, "z": 8, "cf": 0.88 }, { "c": 2, "d": "coreutils install stages a file", "i": "micro-behaviors/fs/write/copy::coreutils-install-file", "o": 1713, "z": 11, "cf": 0.7 }, { "c": 2, "d": "Script returns a process status", "i": "micro-behaviors/process/exit/terminate::shell-return-status", "o": 1493, "z": 8, "cf": 0.8 }, { "c": 1, "d": "Absolute worker source directory literal", "i": "objectives/credential-access/files/hdf5-external::worker-source-path", "o": 1542, "z": 5, "cf": 0.9 } ], "ln": 1445, "col": 11, "line": 34 }, { "b": "yIdf(A^YP-B8\u0026{PxKL{)fjw*sy?Wx/BzkVhB1.DJwO#ZgA+^prwPITez/u)yjuK#WpEVYstsr4zyJKGlavQf\u0026A^p{$pgn0JjX{3dzDy:%yyiBEzeA\u003c4BuJJAzxJw2wO#QhefG1Hx(4QbefFwswfsPlp-%$2A+/o6z*cmfmr\u0026xNj-tpJzG*2tyAK{63rgOSze0(@y=#xsy\u0026:d{rc-B]jWB4ay?Wx/BzkVh3q1-CzAR]SwO#ZgA+=1XByxiiB-pzRlU{gLB3irrwO$N/A+=1Hvru6[z/PM6B3h{5C4CGdAbxf7BurGAx(4H9C@(vcx(dAXD2NsTCR9#DxK#3(eOFNgwnC*$fk\u003e/vzG*2tyDz\u003e(pEUV#arUfczeS@cg=EoHar\u00267TAbf8%x(XRPz/x!Kz/xo9Cw?IqfjOWoz/65qB75@%vScGn3vJl", "n": [ { "c": 3, "d": "chmod sets a SUID numeric mode", "i": "micro-behaviors/fs/chmod/modify::chmod-setuid-numeric-mode", "o": 2222, "z": 11, "cf": 0.9 }, { "c": 2, "d": "shell script heredoc", "i": "micro-behaviors/process/create/eval::shell-heredoc", "o": 1976, "z": 7, "cf": 0.8 }, { "c": 1, "d": "Desktop Entry header fragment", "i": "micro-behaviors/os/autorun/login-items::source-desktop-entry-header", "o": 1984, "z": 15, "cf": 0.6 }, { "c": 1, "d": "Agent terminal tool key", "i": "micro-behaviors/process/create/agent::ai-agent-terminal-tool-name", "o": 2077, "z": 9, "cf": 0.85 }, { "c": 1, "d": "URL path carries a long base64 segment", "i": "objectives/exfiltration/http/encoded::url-path-base64-segment", "o": 2243, "z": 29, "cf": 0.9 }, { "c": 1, "d": "Desktop file suffix", "i": "objectives/persistence/login/xdg::desktop-file-suffix", "o": 1966, "z": 8, "cf": 0.75 }, { "c": 1, "d": "Desktop entry executable directive", "i": "objectives/persistence/system/init/boot::linux-desktop-entry-exec", "o": 2060, "z": 5, "cf": 0.8 }, { "c": 1, "d": "Type=Application directive", "i": "objectives/persistence/system/init/boot::type-application-directive", "o": 2092, "z": 16, "cf": 0.5 } ], "ln": 1928, "col": 13, "line": 49 } ], "depth": 1, "facts": { "imp": [ [ "", "cd" ], [ "", "cd" ], [ "", "echo" ], [ "", "echo" ], [ "", "return" ], [ "", "return" ], [ "", "install" ], [ "", "install" ], [ "", "cp" ], [ "", "cp" ], [ "", "install" ], [ "", "install" ], [ "", "ln" ], [ "", "ln" ], [ "", "install" ], [ "", "install" ], [ "", "install" ], [ "", "install" ], [ "", "cat" ], [ "", "cat" ], [ "", "chmod" ], [ "", "chmod" ] ], "tgt": [ "cat", "cd", "chmod", "cp", "echo", "install", "ln", "return" ], "funcs": [ [ "package", 1217 ] ], "metrics": { "ast": { "max_depth": 9.0, "bind_count": 15.0, "call_count": 11.0, "node_count": 359.0, "identifier_count": 34.0, "string_literal_count": 36.0, "array_literal_max_length": 12.0 }, "file": { "size": 2275.0, "entropy": 5.36, "size_bytes": 2275.0 }, "text": { "digit_ratio": 0.08, "space_count": 202.0, "total_lines": 63.0, "char_entropy": 5.36, "unique_chars": 87.0, "string_density": 0.57, "avg_line_length": 35.11, "high_byte_ratio": 0.0, "max_line_length": 138.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.14, "last_line_length": 1.0, "long_token_count": 2.0, "whitespace_ratio": 0.12, "most_common_ratio": 0.07, "identifier_density": 1.17, "line_length_stddev": 34.81, "encoded_string_ratio": 0.06, "normalized_string_count": 4.54, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.33, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "normalized_unique_identifiers": 5.69 }, "binds": { "count": 15.0 }, "calls": { "count": 11.0 }, "binary": { "overall_entropy": 5.36, "peak_region_bytes": 2275.0, "peak_region_entropy": 5.3 }, "source": { "function_count": 1.0 }, "strings": { "total": 36.0, "url_count": 1.0, "avg_length": 27.44, "max_length": 108.0, "path_count": 1.0, "avg_entropy": 3.32, "hex_strings": 2.0, "total_bytes": 988.0, "entropy_stddev": 0.95 }, "comments": { "chars": 436.0, "lines": 6.0, "total": 6.0, "to_code_ratio": 0.11, "base64_in_comments": 1.0, "high_entropy_comments": 1.0 }, "functions": { "count": 1.0, "avg_params": 11.0, "max_params": 11.0, "avg_name_length": 7.0, "avg_length_lines": 42.0, "max_length_lines": 42.0, "min_length_lines": 42.0, "many_params_count": 1.0, "avg_param_name_length": 54.91, "density_per_100_lines": 1.59, "code_in_functions_ratio": 0.67 }, "identifiers": { "count": 34.0, "total": 74.0, "avg_length": 7.18, "max_length": 30.0, "min_length": 2.0, "avg_entropy": 2.28, "reuse_ratio": 0.46, "unique_count": 34.0, "length_stddev": 5.58, "has_digit_ratio": 0.18, "all_lowercase_ratio": 0.65, "all_uppercase_ratio": 0.03, "numeric_suffix_count": 5.0 } } }, "id": 1, "mol": "H₃(CmF₂Os)Md(Bk)", "path": "openwork-0.18.34-1.src.tar.gz!!openwork/PKGBUILD", "pid": 0, "risk": 5, "sha": "cd98b5d607040615dc6c27d7e15c331c10a0b5941c85cd8dfd4f44831104264c", "size": 2275, "traits": [ { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64", "conf": 0.94, "crit": 1, "desc": "x86 or AMD64 architecture reference", "spans": [ [ 504, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::arch-aarch64", "conf": 1.0, "crit": 1, "desc": "AArch64 (ARM64) architecture string", "spans": [ [ 513, 0 ] ] }, { "id": "metadata/file/string/identity::multi-architecture-name-set--other", "conf": 0.9, "crit": 1, "desc": "CPU architecture family (other targets)", "spans": [ [ 504, 0 ] ] }, { "id": "metadata/build/package/recipe::pkgbuild-architecture-checksum-arrays", "conf": 0.95, "crit": 3, "desc": "PKGBUILD defines architecture checksum arrays", "spans": [ [ 912, 19 ] ] }, { "id": "micro-behaviors/fs/link/symlink::shell-ln-symlink", "conf": 0.88, "crit": 3, "desc": "Shell creates a symbolic link", "spans": [ [ 1643, 8 ] ] }, { "id": "metadata/build/package/recipe::pkgbuild-carch-case", "conf": 0.95, "crit": 3, "desc": "PKGBUILD branches on CARCH", "spans": [ [ 1266, 20 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::arch-arm64", "conf": 1.0, "crit": 1, "desc": "arm64 architecture string", "spans": [ [ 1038, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 528, 19 ] ] }, { "id": "metadata/file/string/identity::multi-architecture-name-set--arm-mips", "conf": 0.9, "crit": 1, "desc": "CPU architecture family (ARM and MIPS)", "spans": [ [ 513, 0 ] ] }, { "id": "micro-behaviors/fs/chmod/modify::chmod-setuid-numeric-mode", "atk": "T1222", "mbc": "E1222", "conf": 0.9, "crit": 3, "desc": "chmod sets a SUID numeric mode", "spans": [ [ 2222, 11 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-arm", "conf": 0.94, "crit": 1, "desc": "x86 or ARM architecture reference", "spans": [ [ 513, 0 ] ] }, { "id": "micro-behaviors/fs/chmod/modify::chmod-command", "atk": "T1222", "mbc": "E1222", "conf": 0.6, "crit": 3, "desc": "chmod shell command", "spans": [ [ 2222, 5 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references", "conf": 0.94, "crit": 3, "desc": "References multiple CPU architecture names", "spans": [ [ 504, 6 ], [ 513, 7 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multi-arch-target", "atk": "T1082", "mbc": "Discovery", "conf": 0.85, "crit": 3, "desc": "Script targets multiple CPU architectures", "spans": [ [ 513, 7 ], [ 1038, 5 ] ] } ], "type": "shell" }, { "id": 3, "sha": "775c15639242093b2bc663f499791f9c25a6514d5432ba6f13ec9dea74ef73b7", "path": "gtk3@3.24.52-1.registry.json", "size": 810, "type": "registry", "depth": 2 }, { "id": 4, "mol": "Md", "sha": "f5f8f80aa9f49fca9fca2ebff8428de0616623cdd23d95aa93ba0f0cd6096887", "path": "nss@3.127-1.registry.json", "risk": 1, "size": 823, "type": "registry", "depth": 2 }, { "id": 5, "sha": "d0205d2e2655c896d2f047596ed3ac43696e5f1390c54f44f5e25cd6d30100cb", "path": "alsa-lib@1.2.16.1-1.registry.json", "size": 833, "type": "registry", "depth": 2 }, { "id": 6, "sha": "1c1212dbbbf09af6622c8b2a9258ca176e01ed8769c7fd65b2da0e9914d7aa0a", "path": "libxss@1.2.5-1.registry.json", "size": 824, "type": "registry", "depth": 2 }, { "id": 7, "sha": "cfa94a96dd577baa362ef418560ef47ec140321120ead40b8534c7f03d68b3c2", "path": "libxtst@1.2.5-1.registry.json", "size": 827, "type": "registry", "depth": 2 }, { "id": 8, "sha": "a6a1bced7922d5631e0d47027542e90e65660bb88d4db047a2a57bf789ce8fa9", "path": "xdg-utils@1.2.1-2.registry.json", "size": 871, "type": "registry", "depth": 2 }, { "id": 9, "sha": "8597fb742a67543e9b52ada4dde928eeebcab3415b2014219cc3a7ef396a1ea8", "path": "at-spi2-core@2.60.6-1.registry.json", "size": 847, "type": "registry", "depth": 2 }, { "id": 10, "sha": "7c5391bcf4e58236dc9e4bb85e39f804827a4afd524147dee79d7b321c15f3ab", "path": "libdrm@2.4.134-1.registry.json", "size": 808, "type": "registry", "depth": 2 }, { "id": 11, "sha": "a31afea56e74623639c7f7e80f1c4e1fdcf28f11bc6cf4b38e16588a406f61a2", "path": "libxkbcommon@1.13.2-1.registry.json", "size": 819, "type": "registry", "depth": 2 }, { "id": 12, "mol": "O(S)Md", "sha": "75cc4554c03247908add63970f7d4ca24c91cb4b93a479810781d6151ebfa015", "path": "mesa@26.1.8-1.registry.json", "risk": 2, "size": 830, "type": "registry", "depth": 2 }, { "id": 13, "sha": "0c3669509fabc747ead4f3f3847beb0dbd24d43208b1b623a623291ad707f29f", "path": "dbus@1.16.2-1.registry.json", "size": 840, "type": "registry", "depth": 2 }, { "id": 14, "sha": "0ff5ef5635422ecc238067392a8039c5fdb031f364dedb68f287430894421242", "path": "hicolor-icon-theme@0.18-1.registry.json", "size": 847, "type": "registry", "depth": 2 }, { "id": 15, "mol": "Md", "sha": "c3a83b10e72975b162d1aee1717027239b0e7e7fa3c5b40f77c224fca1935e83", "path": "openwork@0.18.34-1.registry.json", "risk": 1, "size": 839, "type": "registry", "depth": 1 } ], "omitted_files": 13, "rev": "40b8c", "v": "8" } }