registry / @cotal-ai/cli / 0.132.6
@cotal-ai/cli@0.132.6
Cotal mesh CLI: up, join, watch, console, spawn, mint, channels, history, ext.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package has no install hook, and the flagged agent-skill writes occur during explicit setup and are limited to managed skill files with backups. Network feedback is sent by the explicit feedback command to Cotal's intake, and no automatic credential exfiltration or unrelated collection was found.
Static reason
One or more suspicious static signals were detected.
Trigger
User invokes cotal setup, cotal feedback, cotal join, or an extension-management command.
Impact
No malicious impact identified; setup may write managed skills under ~/.agents/skills and its ownership manifest under ~/.cotal.
Mechanism
Setup reconciles the package's canonical skill files with backups for divergent copies. Feedback posts user-submitted report fields to Cotal's intake. No automatic credential collection or unrelated collector was identified.
AI rationale
The package has no install hook, and the flagged agent-skill writes occur during explicit setup and are limited to managed skill files with backups. Network feedback is sent by the explicit feedback command to Cotal's intake, and no automatic credential exfiltration or unrelated collection was found.
Evidence
~/.agents/skills/<name>/SKILL.md~/.cotal/agent-skills.json
Network endpoints2
broker.cotal.ai/v1/feedbackcotal.ai/v1/feedback
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hook; its main entry is dist/index.js.
- Agent skill reconciliation runs from the explicit cotal setup command or its --skills mode.
- Skill reconciliation writes Cotal's canonical SKILL.md files under ~/.agents/skills and backs up changed copies.
- Feedback is an explicit command that sends the submitted report to Cotal's feedback intake; any key is attached to that request.
- Join behavior, including selecting a default general channel, runs only when the user invokes join.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/seed/reconcile.jsView file
1import { existsSync, renameSync } from "node:fs";
L2: import { spawnSync } from "node:child_process";
L3: import { randomBytes } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/seed/reconcile.jsView on unpkg · L1dist/lib/persona-files.jsView file
274process.on(signal, pass);
L275: const child = program ? spawn(program, [draft], { stdio: "inherit" }) : spawn(`${editor} ${quoted}`, { shell: true, stdio: "inherit" });
L276: return new Promise(resolve => {
High
dist/lib/nats-bin.jsView file
Findings
5 High4 Medium4 Low
HighChild Processdist/seed/reconcile.js
HighShelldist/lib/persona-files.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/lib/agent-skills.js
HighRuntime Package Installdist/commands/setup.js
HighSemantic Analysis Limiteddist/commands/ext.js
MediumDynamic Requiredist/lib/nats-bin.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cotal-ai/cli@0.132.6.
See all versions of @cotal-ai/cli for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/cli@0.132.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.