registry / @cotal-ai/cli / 0.132.7
@cotal-ai/cli@0.132.7
Cotal mesh CLI: up, join, watch, console, spawn, mint, channels, history, ext.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no install hooks, and the inspected filesystem and network operations are tied to explicit CLI commands. The flagged skill writes, feedback submission, and mesh connection match the CLI's purpose; no concrete attack behavior was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs setup, feedback, or join; no install-time trigger was found.
Impact
No malicious or suspicious impact identified.
Mechanism
Setup reconciles package-authored skills, feedback sends the entered report to its intake, and join connects to the selected mesh.
AI rationale
The manifest has no install hooks, and the inspected filesystem and network operations are tied to explicit CLI commands. The flagged skill writes, feedback submission, and mesh connection match the CLI's purpose; no concrete attack behavior was identified.
Evidence
~/.agents/skills/<name>/SKILL.md
Network endpoints2
broker.cotal.aicotal.ai
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hooks; its main export is the CLI module.
- Agent skills are reconciled by the explicit setup command and write Cotal-authored SKILL.md files under ~/.agents/skills.
- Feedback submits a user-provided report only when the feedback command is run, using the official intake or a configured URL.
- Joining a mesh is performed by the explicit join command using its supplied link or connection options.
Evidence against
- The package contains process execution and filesystem writes, but the inspected uses support setup and CLI operations.
- Feedback can send report details and a configured feedback key to its chosen intake, but this is part of the explicit feedback submission flow.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/seed/reconcile.jsView file
1import { existsSync, renameSync } from "node:fs";
L2: import { spawnSync } from "node:child_process";
L3: import { randomBytes } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/seed/reconcile.jsView on unpkg · L1dist/lib/persona-files.jsView file
274process.on(signal, pass);
L275: const child = program ? spawn(program, [draft], { stdio: "inherit" }) : spawn(`${editor} ${quoted}`, { shell: true, stdio: "inherit" });
L276: return new Promise(resolve => {
High
dist/lib/nats-bin.jsView file
Findings
5 High4 Medium4 Low
HighChild Processdist/seed/reconcile.js
HighShelldist/lib/persona-files.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/lib/agent-skills.js
HighRuntime Package Installdist/commands/setup.js
HighSemantic Analysis Limiteddist/commands/ext.js
MediumDynamic Requiredist/lib/nats-bin.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cotal-ai/cli@0.132.7.
See all versions of @cotal-ai/cli for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/cli@0.132.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.