registry / @cotal-ai/connector-hermes / 0.9.0

@cotal-ai/connector-hermes@0.9.0

Cotal connector for the Hermes (Nous Research) agent.

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 10 file(s), 1.27 MB of source, external domains: broker.cotal.ai, cotal.ai, hermes-agent.nousresearch.com, json-schema.org

Source & flagged code

5 flagged

bin/install.mjsView file

Lines 1-41javascript

1#!/usr/bin/env node

2/**

3 * `npx @cotal-ai/connector-hermes <install|uninstall>`

4 *

5 * Wires the Cotal plugin into an existing Hermes so its gateway can join a Cotal mesh, and

6 * reverses it cleanly. The plugin (incl. the bundled `_sidecar/standalone.cjs`) lands in

7 * `<HERMES_HOME>/plugins/cotal`, gets enabled, and your mesh config is written to

8 * `<HERMES_HOME>/.env`.

9 *

10 * It figures out WHERE Hermes lives on its own:

11 * - `hermes` on PATH → host mode (also covers running this INSIDE the container)

12 * - else a running Hermes container → docker mode (copy in + `docker exec … plugins enable`)

13 * - else `--target-home <path>` → files-only mode (place files, print the manual steps)

14 * Override the guess with `--docker <container>`, `--target-home <path>`, or `--profile <name>`.

15 *

16 * Interactive in a TTY; non-interactive with `--yes` (or no TTY), taking mesh config from

17 * `--link/--space/--name/--server` flags or the matching `COTAL_*` env vars. A non-interactive

18 * run never mutates an auto-detected container — pass `--docker <name>` to be explicit.

19 *

20 * House rule: no fallbacks. If we can't find a place to install, we fail loudly and write nothing.

21 */

22import { execFileSync } from "node:child_process";

23import {

High

Child Process

Package source references child process execution.

bin/install.mjsView on unpkg · L21

24 cpSync,

25 existsSync,

26 mkdirSync,

27 mkdtempSync,

28 readFileSync,

29 rmSync,

30 writeFileSync,

31} from "node:fs";

32import { createConnection } from "node:net";

33import { homedir, tmpdir } from "node:os";

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/install.mjsView on unpkg · L21

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/install.mjsView on unpkg · L21

34import { dirname, join, sep } from "node:path";

35import { createInterface } from "node:readline/promises";

36import { fileURLToPath } from "node:url";

38const PKG_ROOT = fileURLToPath(new URL("..", import.meta.url));

39const PLUGIN_SRC = join(PKG_ROOT, "plugin", "cotal");

40const SIDECAR = join(PLUGIN_SRC, "_sidecar", "standalone.cjs");

plugin/cotal/_sidecar/standalone.cjsView file

7var __hasOwnProp = Object.prototype.hasOwnProperty; L8: var __commonJS = (cb, mod) => function __require() { L9: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

plugin/cotal/_sidecar/standalone.cjsView on unpkg · L7

plugin/cotal/hooks.pyView file

•path = plugin/cotal/hooks.py kind = build_helper sizeBytes = 2717 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugin/cotal/hooks.pyView on unpkg

Source & flagged code

5 flagged · loading source

bin/install.mjsView file

21*/ L22: import { execFileSync } from "node:child_process"; L23: import {

High

Child Process

Package source references child process execution.

bin/install.mjsView on unpkg · L21

21Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L21: */ L22: import { execFileSync } from "node:child_process"; L23: import { ... L31: } from "node:fs"; L32: import { createConnection } from "node:net"; L33: import { homedir, tmpdir } from "node:os"; ... L47: const die = (msg) => { L48: process.stderr.write(`✗ ${msg}\n`); L49: process.exit(1); ... L119: function configFromFlags(flags, defaults) { L120: const link = flags.link || process.env.COTAL_LINK; L121: if (link) return { COTAL_LINK: link, COTAL_NAME: flags.name || process.env.COTAL_NAME || defaults.name };

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/install.mjsView on unpkg · L21

21Cross-file remote execution chain: bin/install.mjs spawns plugin/cotal/_sidecar/standalone.cjs; helper contains network access plus dynamic code execution. L21: */ L22: import { execFileSync } from "node:child_process"; L23: import { ... L31: } from "node:fs"; L32: import { createConnection } from "node:net"; L33: import { homedir, tmpdir } from "node:os"; ... L47: const die = (msg) => { L48: process.stderr.write(`✗ ${msg}\n`); L49: process.exit(1); ... L119: function configFromFlags(flags, defaults) { L120: const link = flags.link || process.env.COTAL_LINK; L121: if (link) return { COTAL_LINK: link, COTAL_NAME: flags.name || process.env.COTAL_NAME || defaults.name };

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/install.mjsView on unpkg · L21

plugin/cotal/_sidecar/standalone.cjsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

plugin/cotal/_sidecar/standalone.cjsView on unpkg · L7

plugin/cotal/hooks.pyView file

•path = plugin/cotal/hooks.py kind = build_helper sizeBytes = 2717 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugin/cotal/hooks.pyView on unpkg

Findings

4 High5 Medium4 Low

HighChild Processbin/install.mjs

HighShell

HighEntrypoint Build Divergencebin/install.mjs

HighCross File Remote Execution Contextbin/install.mjs

MediumDynamic Requireplugin/cotal/_sidecar/standalone.cjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperplugin/cotal/hooks.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

bin/install.mjsView file

Lines 1-41javascript

1#!/usr/bin/env node

2/**

3 * `npx @cotal-ai/connector-hermes <install|uninstall>`

4 *

5 * Wires the Cotal plugin into an existing Hermes so its gateway can join a Cotal mesh, and

6 * reverses it cleanly. The plugin (incl. the bundled `_sidecar/standalone.cjs`) lands in

7 * `<HERMES_HOME>/plugins/cotal`, gets enabled, and your mesh config is written to

8 * `<HERMES_HOME>/.env`.

9 *

10 * It figures out WHERE Hermes lives on its own:

11 * - `hermes` on PATH → host mode (also covers running this INSIDE the container)

12 * - else a running Hermes container → docker mode (copy in + `docker exec … plugins enable`)

13 * - else `--target-home <path>` → files-only mode (place files, print the manual steps)

14 * Override the guess with `--docker <container>`, `--target-home <path>`, or `--profile <name>`.

15 *

16 * Interactive in a TTY; non-interactive with `--yes` (or no TTY), taking mesh config from

17 * `--link/--space/--name/--server` flags or the matching `COTAL_*` env vars. A non-interactive

18 * run never mutates an auto-detected container — pass `--docker <name>` to be explicit.

19 *

20 * House rule: no fallbacks. If we can't find a place to install, we fail loudly and write nothing.

21 */

22import { execFileSync } from "node:child_process";

23import {

High

Child Process

Package source references child process execution.

bin/install.mjsView on unpkg · L21

24 cpSync,

25 existsSync,

26 mkdirSync,

27 mkdtempSync,

28 readFileSync,

29 rmSync,

30 writeFileSync,

31} from "node:fs";

32import { createConnection } from "node:net";

33import { homedir, tmpdir } from "node:os";

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/install.mjsView on unpkg · L21

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/install.mjsView on unpkg · L21

34import { dirname, join, sep } from "node:path";

35import { createInterface } from "node:readline/promises";

36import { fileURLToPath } from "node:url";

38const PKG_ROOT = fileURLToPath(new URL("..", import.meta.url));

39const PLUGIN_SRC = join(PKG_ROOT, "plugin", "cotal");

40const SIDECAR = join(PLUGIN_SRC, "_sidecar", "standalone.cjs");

plugin/cotal/_sidecar/standalone.cjsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

plugin/cotal/_sidecar/standalone.cjsView on unpkg · L7

plugin/cotal/hooks.pyView file

•path = plugin/cotal/hooks.py kind = build_helper sizeBytes = 2717 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugin/cotal/hooks.pyView on unpkg