registry / @cotal-ai/cli / 0.135.10
@cotal-ai/cli@0.135.10
Cotal mesh CLI: up, join, watch, console, spawn, mint, channels, history, ext.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged process execution, feedback transport, and agent-skill writes are associated with user-run CLI operations, and the manifest declares no install lifecycle hooks. The inspected source shows no unauthorized collection or other concrete attack behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Explicit user invocation of setup, feedback, join, or extension-management commands; no malicious install or import trigger was found.
Impact
No unauthorized data collection, account action, or agent-control mutation was identified.
Mechanism
Setup may install Cotal-authored skills, feedback submits a report to its intake, and extension management invokes npm for the requested package.
AI rationale
The flagged process execution, feedback transport, and agent-skill writes are associated with user-run CLI operations, and the manifest declares no install lifecycle hooks. The inspected source shows no unauthorized collection or other concrete attack behavior.
Evidence
~/.agents/skills/<name>/SKILL.md
Network endpoints2
broker.cotal.ai/v1/feedbackcotal.ai/v1/feedback
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install or lifecycle hooks; its scripts are development and build tasks.
- Importing the main entry registers commands and exports the runner; the inspected entry does not invoke a command.
- Agent skills are reconciled to ~/.agents/skills during an explicit cotal setup flow, with writes limited to Cotal’s skill files.
- Feedback sends a user-submitted report to the feedback intake when the feedback command runs; contact details come from command input, configured feedback values, or local git email.
- The join operation is exposed as a command and runs when invoked.
Evidence against
- The package includes process execution, network requests, and writes to an AI-agent skills directory, but the inspected uses serve explicit CLI features.
- The flagged runtime npm install is part of setup’s optional global-install flow, which prompts for confirmation when interactive.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
Source & flagged code
6 flaggeddist/seed/reconcile.jsView file
1import { existsSync, renameSync } from "node:fs";
L2: import { spawnSync } from "node:child_process";
L3: import { randomBytes } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/seed/reconcile.jsView on unpkg · L1dist/lib/persona-files.jsView file
274process.on(signal, pass);
L275: const child = program ? spawn(program, [draft], { stdio: "inherit" }) : spawn(`${editor} ${quoted}`, { shell: true, stdio: "inherit" });
L276: return new Promise(resolve => {
High
dist/lib/nats-bin.jsView file
Findings
5 High4 Medium4 Low
HighChild Processdist/seed/reconcile.js
HighShelldist/lib/persona-files.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/lib/agent-skills.js
HighRuntime Package Installdist/commands/setup.js
HighSemantic Analysis Limiteddist/commands/ext.js
MediumDynamic Requiredist/lib/nats-bin.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cotal-ai/cli@0.135.10.
See all versions of @cotal-ai/cli for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/cli@0.135.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.