registry / @cotal-ai/cli / 0.132.4
@cotal-ai/cli@0.132.4
Cotal mesh CLI: up, join, watch, console, spawn, mint, channels, history, ext.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged setup writes are part of the explicit setup command, while feedback credential use is tied to an explicit submission. Runtime telemetry is disclosed and can be disabled; its payload contains usage metadata and scrubbed error details.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Telemetry runs on CLI command exit; feedback submission and setup require their respective commands.
Impact
No malicious impact identified.
Mechanism
Telemetry sends disclosed usage metadata; feedback submits user-provided content and an explicitly selected feedback key; setup reconciles authored skills.
AI rationale
The flagged setup writes are part of the explicit setup command, while feedback credential use is tied to an explicit submission. Runtime telemetry is disclosed and can be disabled; its payload contains usage metadata and scrubbed error details.
Evidence
~/.agents/skills~/.cotal/telemetry.json
Network endpoints3
cotal.ai/v1/telemetrybroker.cotal.ai/v1/feedbackcotal.ai/v1/feedback
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to the CLI entry and declares no install lifecycle hook.
- Cross-vendor agent skills are reconciled through the explicit cotal setup flow.
- Feedback sends only when the feedback command runs, using its supplied feedback key and a validated intake URL.
- Runtime telemetry is described as anonymous, has off and minimal settings, and reports command and platform metadata.
- Regular telemetry uses a random install ID; error text and stack paths are scrubbed before reporting.
Evidence against
- Telemetry settings default to regular, so normal CLI command exits send telemetry until the user disables it.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
18 flaggeddist/seed/reconcile.jsView file
1import { existsSync, renameSync } from "node:fs";
L2: import { spawnSync } from "node:child_process";
L3: import { randomBytes } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/seed/reconcile.jsView on unpkg · L1dist/lib/persona-files.jsView file
274process.on(signal, pass);
L275: const child = program ? spawn(program, [draft], { stdio: "inherit" }) : spawn(`${editor} ${quoted}`, { shell: true, stdio: "inherit" });
L276: return new Promise(resolve => {
High
dist/lib/nats-bin.jsView file
Findings
17 High4 Medium4 Low
HighChild Processdist/seed/reconcile.js
HighShelldist/lib/persona-files.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/lib/agent-skills.js
HighRuntime Package Installdist/commands/setup.js
HighSemantic Analysis Limiteddist/commands/ext.js
HighKnown Malware Source Similaritydist/telemetry.js
HighKnown Malware Source Similaritydist/commands/up.js
HighKnown Malware Source Similaritydist/lib/self-exec.js
HighKnown Malware Source Similaritydist/lib/service-process.js
HighKnown Malware Source Similaritydist/commands/setup-start.js
HighKnown Malware Source Similaritydist/commands/setup.js
Affected versions and remediation
This report applies to @cotal-ai/cli@0.132.4.
See all versions of @cotal-ai/cli for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/cli@0.132.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.