registry / @cotal-ai/cli / 0.140.6
@cotal-ai/cli@0.140.6
Cotal mesh CLI: up, join, watch, console, spawn, mint, channels, history, ext.
AI Security Review
scanned 23h ago · by lpm-firewall-aiThe package has no install lifecycle hooks, and its agent-skill writes occur only through explicit setup commands and are limited to Cotal-authored skill files. The reviewed feedback credential flow is used only for an explicit report submission to the feedback intake.
Static reason
One or more suspicious static signals were detected.
Trigger
Explicit CLI commands such as `cotal setup`, `cotal setup --skills`, or `cotal feedback`.
Impact
No malicious or unauthorized effect identified.
Mechanism
Setup reconciles Cotal-authored skill files; feedback sends the submitted report and, when configured, its intake key to the feedback intake.
AI rationale
The package has no install lifecycle hooks, and its agent-skill writes occur only through explicit setup commands and are limited to Cotal-authored skill files. The reviewed feedback credential flow is used only for an explicit report submission to the feedback intake.
Evidence
~/.agents/skills/<name>/SKILL.md
Network endpoints2
broker.cotal.aicotal.ai
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has no install, preinstall, or postinstall hook; the entry points are CLI modules.
- `cotal setup --skills` invokes the skill reconciler, so the agent-surface write requires an explicit command.
- The reconciler reads canonical skills and preserves divergent user copies in backups.
- Feedback credentials are used for an explicit submission to the configured or Cotal feedback intake.
Evidence against
- The exported entry point imports and registers CLI commands; no attack behavior was identified at import time.
- The skill reconciler is limited to Cotal-authored skills under `~/.agents/skills`.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/seed/reconcile.jsView file
1import { existsSync, renameSync } from "node:fs";
L2: import { spawnSync } from "node:child_process";
L3: import { randomBytes } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/seed/reconcile.jsView on unpkg · L1dist/lib/persona-files.jsView file
274process.on(signal, pass);
L275: const child = program ? spawn(program, [draft], { stdio: "inherit" }) : spawn(`${editor} ${quoted}`, { shell: true, stdio: "inherit" });
L276: return new Promise(resolve => {
High
dist/lib/nats-bin.jsView file
Findings
5 High4 Medium4 Low
HighChild Processdist/seed/reconcile.js
HighShelldist/lib/persona-files.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/lib/agent-skills.js
HighRuntime Package Installdist/commands/setup.js
HighSemantic Analysis Limiteddist/commands/ext.js
MediumDynamic Requiredist/lib/nats-bin.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cotal-ai/cli@0.140.6.
See all versions of @cotal-ai/cli for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/cli@0.140.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.