registry / @cotal-ai/cli / 0.141.3
@cotal-ai/cli@0.141.3
Cotal mesh CLI: up, join, watch, console, spawn, mint, channels, history, ext.
AI Security Review
scanned 8h ago · by lpm-firewall-aiThe flagged process execution, skill writes, and network operations are associated with user-invoked CLI features. The shipped skill is limited to topology guidance and explicitly gates deployment on user agreement; no malicious behavior was found.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs a CLI command such as setup, feedback, or join; package import alone does not reach the reviewed command effects.
Impact
These actions support the CLI’s stated purpose. The inspected sources show no automatic collection or unrelated transmission of credentials or files.
Mechanism
Setup reconciles the package’s own skill file and may offer to install the CLI globally; feedback submits user-provided report data to its intake; join connects to the selected space.
AI rationale
The flagged process execution, skill writes, and network operations are associated with user-invoked CLI features. The shipped skill is limited to topology guidance and explicitly gates deployment on user agreement; no malicious behavior was found.
Evidence
~/.agents/skills/<name>/SKILL.md
Network endpoints2
broker.cotal.ai/v1/feedbackcotal.ai/v1/feedback
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares build, typecheck, and test scripts, with no install lifecycle hook.
- CLI side effects are gated behind a validated command invocation.
- Setup prepares a space and leaves startup as a separate explicit decision.
- Setup installs the package’s shipped skill as a single managed SKILL.md file, preserving user edits in a backup.
- The shipped topology skill says deployment requires user agreement.
- Feedback sends one explicit submission without redirects or automatic retries.
Evidence against
- Setup can write the shipped skill under ~/.agents/skills and may offer a global install when run through npx.
- The CLI has runtime subprocess, network, and filesystem operations, including connector reconciliation and join operations.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
6 flaggeddist/seed/reconcile.jsView file
1import { existsSync, renameSync } from "node:fs";
L2: import { spawnSync } from "node:child_process";
L3: import { randomBytes } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/seed/reconcile.jsView on unpkg · L1dist/lib/persona-files.jsView file
274process.on(signal, pass);
L275: const child = program ? spawn(program, [draft], { stdio: "inherit" }) : spawn(`${editor} ${quoted}`, { shell: true, stdio: "inherit" });
L276: return new Promise(resolve => {
High
dist/lib/nats-bin.jsView file
Findings
5 High4 Medium4 Low
HighChild Processdist/seed/reconcile.js
HighShelldist/lib/persona-files.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/lib/agent-skills.js
HighRuntime Package Installdist/commands/setup.js
HighSemantic Analysis Limiteddist/commands/ext.js
MediumDynamic Requiredist/lib/nats-bin.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cotal-ai/cli@0.141.3.
See all versions of @cotal-ai/cli for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/cli@0.141.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.