{ "llm": { "conf": 0.07441932, "grade": "benign", "model": "Qwen/Qwen3.8-27B", "outcome": "benign", "interpretation": "Standard AUR package build script" }, "ml": { "v": "7", "eng": "2.8.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.11107361, "rte": "az", "prob": 0.11107361 }, { "cls": 0, "raw": 0.0072894394, "rte": "az/tar", "prob": 0.0072894394 } ], "prob": 0.11107361, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.11107361316680908, "type": "tar.gz" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000021119913071743213, "type": "shell" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000012745459571306128, "type": "" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000014036893844604492, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-09-03T03:47:44Z" }, "path": "claude-code-2.1.245-1.src.tar.gz", "raw": { "fetched": [ { "kind": "dependency", "size": 6149, "cached": false, "status": 200, "headers": [ [ "date", "Thu, 03 Sep 2026 03:47:39 GMT" ], [ "content-type", "text/markdown; charset=utf-8" ], [ "transfer-encoding", "chunked" ], [ "connection", "keep-alive" ], [ "cf-ray", "a351c63b2bb34b80-IAD" ], [ "cf-cache-status", "EXPIRED" ], [ "age", "0" ], [ "cache-control", "public, max-age=0, must-revalidate" ], [ "content-disposition", "inline" ], [ "last-modified", "Thu, 03 Sep 2026 03:47:39 GMT" ], [ "server", "cloudflare" ], [ "x-content-type-options", "nosniff" ], [ "strict-transport-security", "max-age=31536000; includeSubDomains; preload" ], [ "vary", "rsc, accept-encoding" ], [ "content-security-policy", "default-src 'none'" ], [ "x-frame-options", "DENY" ], [ "x-matched-path", "/_mintlify/_markdown/_sites/[subdomain]/[[...slug]]" ], [ "x-robots-tag", "noindex, nofollow" ], [ "x-vercel-cache", "REVALIDATED" ], [ "x-vercel-id", "iad1::iad1::hbrhb-1788407259443-6474fe4fab01" ], [ "set-cookie", "cf_geo=US-NC; Path=/docs; Secure; SameSite=Lax; Max-Age=300" ], [ "set-cookie", "__cf_bm=s_q4xF7gn95nMhIAPard5J_63Q8JB_Pzg2SaMc_h0Zw-1788407259.3914926-1.0.1.1-W.wUT6AkiyoKDhjeS_6b_iW3IYqB9o7NC8vpAz6AbZsJFwKYdeVS5g.NfsnuXbDn.WPeLFqKUbCRZAcQrZLMNfi5alKaS1jdjDhGineWE2sXzf_68olxhxoQTflDNZjq; HttpOnly; SameSite=None; Secure; Path=/; Domain=claude.com; Expires=Thu, 03 Sep 2026 04:17:39 GMT" ], [ "alt-svc", "h3=\":443\"; ma=86400" ] ], "locator": "https://code.claude.com/docs/en/legal-and-compliance.md", "outcome": "ok", "final_url": "https://code.claude.com/docs/en/legal-and-compliance.md", "fetched_at": 1788407259, "resolved_url": "https://code.claude.com/docs/en/legal-and-compliance.md", "source_offset": 559, "source_sha256": "8a6f59ee35269614419ca6c1f6aae969bcdcda003c4ec4640757d83744b960ae", "content_sha256": "4a4cc1762fb1d992a66347dcf94c60a27d328391d8074c13e8ae9d5c4182413b" } ], "files": [ { "id": 0, "ctx": [ { "b": "abZy80000000zQ\u003e)@3(r5yn$(doJA%6lHVes^0tHe%ng=N(i](RU@sW0y+z47d/iddS#wl[3zFfGtb##LkKii/cUvzrtL!3:M9jx)#Ec{6fJ#GHrNS}Rbau^^#zx}4AM0B@0x+dGH{kLW*Z.to*-\u003cvAOX1e{qVOL", "ln": 0 } ], "mol": "H₃(CmF₂Os)Md(Bk)", "sha": "74027359965fa8b0beef3621009648d90493a36ebdb7a4cc98ebefad75494404", "path": "claude-code-2.1.245-1.src.tar.gz", "risk": 5, "size": 1614, "type": "tar.gz", "facts": { "metrics": { "file": { "size": 1614, "entropy": 7.87 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 1614, "peak_region_entropy": 7.8 } } }, "ident": { "name": { "value": "claude-code", "source": "file.basename", "verified": false }, "trust": "unsigned", "version": { "value": "2.1.245-1.src", "source": "file.basename", "verified": false } }, "traits": [ { "id": "metadata/file/string/identity::multi-architecture-name-set--arm-mips", "conf": 0.9, "crit": 1, "desc": "ARM or MIPS architecture reference", "from": [ { "file": 2 } ] }, { "id": "metadata/build/package/recipe::pkgbuild-architecture-checksum-arrays", "conf": 0.95, "crit": 3, "desc": "PKGBUILD defines architecture checksum arrays", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::arch-arm64", "conf": 1.0, "crit": 1, "desc": "arm64 architecture string", "from": [ { "file": 2 } ] }, { "id": "metadata/file/string/identity::multi-architecture-name-set--other", "conf": 0.9, "crit": 1, "desc": "x86, ARC, or MPSL architecture reference", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multi-arch-target", "atk": "T1082", "mbc": "Discovery", "conf": 0.85, "crit": 3, "desc": "Script targets multiple CPU architectures", "from": [ { "off": 1113, "file": 2, "line": 29 } ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::arch-aarch64", "conf": 1.0, "crit": 1, "desc": "AArch64 (ARM64) architecture string", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references", "conf": 0.94, "crit": 3, "desc": "References multiple CPU architecture names", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/chmod/modify::chmod-command", "atk": "T1222", "mbc": "E1222", "conf": 0.6, "crit": 3, "desc": "chmod shell command", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/chmod/executable/mode::chmod-exec-var-target", "atk": "T1222", "mbc": "E1222", "conf": 0.9, "crit": 3, "desc": "chmod marks a variable path executable", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64", "conf": 0.94, "crit": 1, "desc": "x86 or AMD64 architecture reference", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/write/copy::coreutils-install-executable", "conf": 0.8, "crit": 3, "desc": "coreutils install stages an executable file", "from": [ { "file": 2 } ] }, { "id": "metadata/build/package/recipe::pkgbuild-checksum-skip", "conf": 0.7, "crit": 3, "desc": "PKGBUILD skips source checksum verification", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-arm", "conf": 0.94, "crit": 1, "desc": "x86 or ARM architecture reference", "from": [ { "file": 2 } ] } ] }, { "ctx": [ { "b": "boPY?x(n33x(mH5iV{!6A+PPpz/xx3AV^./z/xodauTdEA+PPpz/xx3AZjbEh83)uv@DiF3l{V/vqfR3vqfQ\u003cAYLsn.(mW]V#6v%p\u0026yF)x(k4QygRB7zdNW8B.\u003e=fkXB}xx(2ziz/4VBboPY?x(n33x(mH5iV{[2vRG:6mSif^vqYG@c$V)%x\u003ezp3Bsws{zdL$AvpA}.z/fUHwmY{F3l{VVB-.Lsvruj4zxJ$hAbP/iBz(hBiV@9TBz#pZfe3%LBzb/ae[n*pfj[T4x\u003ezp3Bt4cuvrD9(eN@ZfwI4tkATAd)yIdJ[zdL\u003euy*?D%wI4zgwmV9!yId*4AY(fgf!Ljrf:.(nxl4N1jUWp.yIdf?B7muSl2E/NxjU$5x\u003e5n}z!9N1xcqqmz!{LrxKM09y?X67B0bgmaBd)FAV/EnA=2JdvqEa{vrb\u003c\u003ejT.X5i5Ub4g::y[vpsg^xF}W{dggiry=@$QBAzFyiXJd0x([3hvLheez7/snBzbYkAa@*6fjO*bB.25nv@C)?a{@d2v}xL0wJ.B?oLF0FzGxw!wO9J7y*?D%wI4zgwmWbq3s)Z!wO#41jT.W!vrl9fdgdpxltpsCA^n^wB0a)lB7Gf1eN@ZpByw)3wN(]IB-5skCX7xcBywS{wGVhhBz8!dzdm6!wmYo]n(Ex-wPI^jA:@W4at1ZSBAh8mAa%i5ayYw5vqx{bx(\u003cY2Acb/jzGv@?cN0LMA+PFudgcA2AcbS4AaJ]$B3g]U2}6w1BugKMy\u002613lavx%NBZ$", "ln": 0, "col": 1, "line": 1 }, { "b": "x(\u003eZf2}6w1Bzb/aeN@QhiV@cOBy/G3v@@\u0026qx([2hm})6oBZ=Z92}6w4vpznux(n37A:-E1aA}KwxDP/VBwcaLcKHecA+PG9A+fhJaz2C7vqYN^wftF#y?j-gwNPQ?xEsb[cV\u003ciFCSD%QxjU$5aARg6z6i[sy?W#lAa9S}B0?q3cT}jcvR/R1A:-]FaAH$ewmxF4x(mMh3je83z!0i$iV@GLzE^i{CXI5dcKIpf3uHcdA:@Vzc)AeheO]0hvqE$=xMOunB2\u003e%cv@C)?e[nZaB.25ov@Diqwn+$0fj/2Oy?ml/y+o7kwg.qfze:r9vqYN^e]tbydggcmB-H#6uWaK*uP6-7c)AeqvrD9(eHkWZyId*4A^YJ:i5Ub4g=^WhBAzFyiXJc%z*c8nz^^f$e[nZaB.25ovqdx8y*?D%wI4zgwmWukwO+{^B7GzCbZTGCxlE\u003cbEj]zJzGQgQCS4xiv@bN@wmV@l3uHcdA:@V/vpsg^xF}Xgc)AeqvrD9(eHkWZyId*4A^YJFvrb\u003c\u003ehz^DQxMOunB2\u003e%cwn=Wfy\u0026r-)B1Q%svrD9(e[5DEv@bN@wmWu5z!9AhA+f5#vrl13fc\u003e)-yId*4A^YPSx(n6reN-Wphz^6%y*?D%wG\u0026Mg3uG(?gbQ$hB.#g.c)}}^nL*=-3uG(?gbQ$hB.#hbCSmP*hz^MBcONFrf\u003eaVMhA25Sw\u0026ILPh-rJMf\u003eK]Hg=WNdhz)lIwIEQHhAiJJfGg$6f/g.0iaB{5wmGaUgH:\u0026MfF+T%i43cZB7!#qh8YI#zf65)vrb\u003c\u003ehz^MBcO/jwfK[MKiwUkQwN)=iw\u0026KjgwI=q6h8X#Ng=n-LhAixBw))CLi5SJLgH%{9hz!\u0026Kw))G7wmW.Xg*@dKwHw]l3ufA-yHH\u003c!c[co=3jgA:B97\u0026by-\u003eq$z8Tsfar\u00267TB8\u003e=3x(XRPv@bN@wmWtrDVi+kC4CYxeHkWgk#H6vEiG^TbZTGCxjLZ%Ej]ITBt4cuvrD9(eN@ZfwImIbzzbHovrD9(a{[U-boPu]wNPW(aA}\u003cmAbYxeaAI4kx(FepBz\u0026pjx(^Y(y?j-iAc3bwwNPA#B-p(1By=Olvrug7efFwswft#jaAIWAAb]JhB0bNrwEn.*az$Rfx)a5tx(n0lvqG:5xK$Q*Bz8!bxK$W?e*9I$vrD9(avy6TwGUMeAaJK3B0bNrwGU(0Bzk]fazC.mByx04wPw]fvr(^lBp5s0asIW(e]kDovqEPax(kOly*?D%wHPX-B7]J4wGVhdazC.mByx04aARJAfk\u003e/Kas!M/B-RNRvRGZ5x(\u003eFwz/](baA8vnwPA0eB7CW+boRhsA=91rzxJIlwPA5sB97\u0026hBAIK-ar\u003erivrD9(ay/tbzddr)ayPvmELir\u0026z!0i(fjFTkfjO*bB.25aze16jx(mMaz/M$fA=k-8zxZXu32ao#Byx04at4bvhV", "ln": 624, "col": 29, "line": 18 }, { "b": "wnc7jflItRfjFTka{[S^vrrRQar\u00267TAbf8%x(XRPB-RNRvRGZkv@bN@wmV@cjuK-lmnDx23l{YEvRGZkB7+[(CYmOwBrA$yq:A-zmpf4\u003el{T^vq-#\u0026xwQ5fjA=-A(nMd]woHSqWpe+aToIv-KnL-8*lR6Tkoh^#d3t1D[v\u003c0ByAc9:yy*?D%wI4zgwmWA6x(kOly*?D%wGSfxkQ3L7pEUV$v}YZ$wfr/*h6s7*DVi+kwnc7jflItRfjFTkfjO*bB.25c3jm8NzGx]dy?$jCl#s?sg:0$/DVKjqwnc7jfjOGzy?ml/y:6#CbZTGCxjLZ%Ej].:AXzGEvrb{jy?Wx\u003czGxxgfc\u003e)-yIdJ[zdObGoI4Pupe:O93vJl", "ln": 1778, "col": 23, "line": 42 } ], "depth": 1, "facts": { "imp": [ [ "", "install" ], [ "", "install" ], [ "", "install" ], [ "", "install" ], [ "", "cat" ], [ "", "cat" ], [ "", "chmod" ], [ "", "chmod" ], [ "", "install" ], [ "", "install" ] ], "tgt": [ "cat", "chmod", "install" ], "funcs": [ [ "package", 1325 ] ], "metrics": { "ast": { "max_depth": 7, "call_count": 5, "node_count": 253, "max_array_len": 7 }, "file": { "size": 2077, "entropy": 5.42 }, "text": { "lines": 52, "top_char": 101, "tab_count": 16, "max_ws_run": 1, "digit_ratio": 0.09, "space_count": 121, "char_entropy": 5.42, "unique_chars": 82, "top_char_null": 0, "string_density": 0.52, "top_char_ratio": 0.07, "avg_line_length": 38.94, "max_line_length": 122, "non_ascii_ratio": 0, "empty_line_ratio": 0.13, "last_line_length": 1, "long_token_count": 2, "whitespace_ratio": 0.09, "identifier_density": 0.88, "line_length_stddev": 33.33, "encoded_string_ratio": 0.07, "normalized_string_count": 3.74, "normalized_unique_identifiers": 4.91 }, "binds": { "count": 16 }, "binary": { "peak_region_bytes": 2048, "peak_region_entropy": 5.49 }, "source": { "function_count": 1 }, "strings": { "hex": 2, "bytes": 919, "count": 27, "url_count": 1, "avg_length": 34.04, "max_length": 103, "path_count": 3, "avg_entropy": 3.64, "entropy_stddev": 0.72 }, "comments": { "chars": 642, "count": 10, "lines": 10, "to_code_ratio": 0.24, "url_in_comments": 1 }, "functions": { "count": 1, "density": 1.92, "avg_params": 9, "code_ratio": 0.35, "max_params": 9, "avg_name_length": 7, "avg_length_lines": 18, "max_length_lines": 18, "min_length_lines": 18, "many_params_count": 1, "avg_param_name_length": 55.33 }, "identifiers": { "count": 46, "unique": 28, "avg_length": 7.75, "max_length": 18, "min_length": 3, "avg_entropy": 2.53, "reuse_ratio": 0.61, "length_stddev": 3.69, "has_digit_ratio": 0.32, "all_lowercase_ratio": 0.61, "all_uppercase_ratio": 0.04, "numeric_suffix_count": 7 } } }, "id": 2, "mol": "H₃(CmF₂Os)Md(Bk)", "path": "claude-code-2.1.245-1.src.tar.gz!!claude-code/PKGBUILD", "pid": 0, "risk": 5, "sha": "221d1b11c9d164fb5290e2a0a289b492c2a8f4af2b15b7c0ab0cac05315013c2", "size": 2077, "traits": [ { "id": "metadata/build/package/recipe::pkgbuild-architecture-checksum-arrays", "conf": 0.95, "crit": 3, "desc": "PKGBUILD defines architecture checksum arrays", "spans": [ [ 1149, 19 ] ] }, { "id": "metadata/file/string/identity::multi-architecture-name-set--arm-mips", "conf": 0.9, "crit": 1, "desc": "ARM or MIPS architecture reference", "spans": [ [ 360, 0 ] ] }, { "id": "metadata/file/string/identity::multi-architecture-name-set--other", "conf": 0.9, "crit": 1, "desc": "x86, ARC, or MPSL architecture reference", "spans": [ [ 351, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 194, 19 ] ] }, { "id": "micro-behaviors/fs/chmod/executable/mode::chmod-exec-var-target", "atk": "T1222", "mbc": "E1222", "conf": 0.9, "crit": 3, "desc": "chmod marks a variable path executable", "spans": [ [ 1949, 21 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::arch-aarch64", "conf": 1.0, "crit": 1, "desc": "AArch64 (ARM64) architecture string", "spans": [ [ 360, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::arch-arm64", "conf": 1.0, "crit": 1, "desc": "arm64 architecture string", "spans": [ [ 1113, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64", "conf": 0.94, "crit": 1, "desc": "x86 or AMD64 architecture reference", "spans": [ [ 351, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-arm", "conf": 0.94, "crit": 1, "desc": "x86 or ARM architecture reference", "spans": [ [ 360, 0 ] ] }, { "id": "metadata/build/package/recipe::pkgbuild-checksum-skip", "conf": 0.7, "crit": 3, "desc": "PKGBUILD skips source checksum verification", "spans": [ [ 1129, 17 ] ] }, { "id": "micro-behaviors/fs/chmod/modify::chmod-command", "atk": "T1222", "mbc": "E1222", "conf": 0.6, "crit": 3, "desc": "chmod shell command", "spans": [ [ 1950, 5 ] ] }, { "id": "micro-behaviors/fs/write/copy::coreutils-install-executable", "conf": 0.8, "crit": 3, "desc": "coreutils install stages an executable file", "spans": [ [ 1337, 15 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multi-arch-target", "atk": "T1082", "mbc": "Discovery", "conf": 0.85, "crit": 3, "desc": "Script targets multiple CPU architectures", "spans": [ [ 360, 7 ], [ 1113, 5 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references", "conf": 0.94, "crit": 3, "desc": "References multiple CPU architecture names", "spans": [ [ 351, 6 ], [ 360, 7 ] ] } ], "type": "shell" }, { "depth": 2, "facts": { "metrics": { "file": { "size": 815, "entropy": 4.67 }, "binary": { "peak_region_bytes": 815, "peak_region_entropy": 4.67 }, "registry": { "age_days": 83, "maintainers": 4, "published_at": 1781153063, "is_deprecated": 0 } } }, "id": 3, "path": "bash@5.3.15-1.registry.json", "pid": 1, "rel": "registry", "role": "sidecar", "sha": "c7a75b6fe246d6e9491b622885a3a7e93fe576e71ee6d6e927cc42b5c8d4bc38", "size": 815, "type": "registry" }, { "ctx": [ { "b": "DM)3hz/ZhBBy/qkiWe0PAW04UzEEx[b03]Ty*?D%wI4zgwmV@ob6EKrB7]Mgb03]6e?[$lg+*Npa$K{SBZ/f3B7/b}uTX42iX-MMh-9uHgD4cxb4ka}uU0O\u003cB0rU0efX[sBy/JnuV{13B7]Mgb06Q:y?$TDvrDW9z/N3.b4CmyfF$49b6mKvy?j!Kb4CB$", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 849, "entropy": 4.72 }, "binary": { "peak_region_bytes": 849, "peak_region_entropy": 4.72 }, "registry": { "rating": 11.88, "age_days": 0, "maintainers": 3, "published_at": 1787446366, "rating_count": 90, "is_deprecated": 0, "package_age_days": 544, "first_published_at": 1740425758 } } }, "id": 4, "mol": "Md", "path": "claude-code@2.1.241-1.registry.json", "pid": 0, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "c8677a718f6ad790c150d62b5065a9e213b652e347802091087919a6989ec48a", "size": 849, "traits": [ { "id": "metadata/registry::aur-package", "conf": 1.0, "crit": 1, "desc": "Arch User Repository package listing" }, { "id": "metadata/registry::freshly-published", "conf": 1.0, "crit": 3, "desc": "Release published within seven days", "spans": [ [ 0, 24 ] ] }, { "id": "metadata/registry::aur-recently-modified", "conf": 0.9, "crit": 3, "desc": "AUR package metadata changed within seven days", "spans": [ [ 0, 24 ] ] } ], "type": "registry" } ], "rev": "479f3", "v": "8" } }