registry / @cotal-ai/connector-jcode / 0.132.2
@cotal-ai/connector-jcode@0.132.2
Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package provides a Jcode connector that starts a managed local host and mirrors recognized credentials into its private Jcode home. The reviewed network submission path is for explicit feedback to Cotal; no malicious credential exfiltration or unrelated automatic action was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
The Jcode host runs when a managed seat starts; feedback submission requires an explicit tool action.
Impact
No malicious impact identified. The runtime may use mirrored provider credentials for the configured Jcode session.
Mechanism
The host prepares a private Jcode home and local API bridge. The reviewed HTTP POST path sends feedback to Cotal endpoints and requires a key or contact email.
AI rationale
The package provides a Jcode connector that starts a managed local host and mirrors recognized credentials into its private Jcode home. The reviewed network submission path is for explicit feedback to Cotal; no malicious credential exfiltration or unrelated automatic action was identified.
Evidence
Private per-seat JCODE_HOME, including mirrored credential files under external/ and config/jcode/
Network endpoints3
broker.cotal.ai/v1/feedbackcotal.ai/v1/feedbackdocs.cotal.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package scripts are build, test, and typecheck tasks; no install lifecycle hook is declared.
- The connector configures a Jcode host for a managed Cotal seat, and the host refuses to start without that seat’s control endpoint.
- At host startup, recognized credentials are mirrored into the private Jcode home for the local Jcode runtime.
- The feedback POST uses Cotal feedback endpoints and requires a supplied key or contact email; no unrelated credential collector was identified.
Evidence against
- The subprocess and credential handling support the package’s stated Jcode connector purpose.
- The reviewed credential-mirroring flow writes to the private Jcode home; it does not itself send credentials over the network.
- The observed feedback submission is an explicit tool action, rather than an install or import-time request.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
Source & flagged code
6 flaggeddist/host.jsView file
50${cb}`:comment}}if(afterDoc){for(let i=0;i<this.errors.length;++i)doc.errors.push(this.errors[i]);for(let i=0;i<this.warnings.length;++i)doc.warnings.push(this.warnings[i])}else{do...
L51: ${end.comment}`:end.comment}this.doc.range[2]=end.offset;break}default:this.errors.push(new errors.YAMLParseError(getErrorPos(token2),"UNEXPECTED_TOKEN",`Unsupported token ${token2...
L52: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
49${cb}`:comment}else{const cb=dc.commentBefore;dc.commentBefore=cb?`${comment}
L50: ${cb}`:comment}}if(afterDoc){for(let i=0;i<this.errors.length;++i)doc.errors.push(this.errors[i]);for(let i=0;i<this.warnings.length;++i)doc.warnings.push(this.warnings[i])}else{do...
L51: ${end.comment}`:end.comment}this.doc.range[2]=end.offset;break}default:this.errors.push(new errors.YAMLParseError(getErrorPos(token2),"UNEXPECTED_TOKEN",`Unsupported token ${token2...
L52: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/host.jsView on unpkg · L49Findings
4 High2 Medium6 Low
HighChild Processdist/host.js
HighSame File Env Network Executiondist/host.js
HighCommand Output Exfiltrationdist/host.js
HighCross File Remote Execution Contextdist/host.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowEvaldist/host.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @cotal-ai/connector-jcode@0.132.2.
See all versions of @cotal-ai/connector-jcode for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/connector-jcode@0.132.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.