registry / @cotal-ai/connector-jcode / 0.132.5
@cotal-ai/connector-jcode@0.132.5
Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged process and credential flows are consistent with the package’s stated purpose: starting a private Jcode instance to drive an agent session. The inspected source shows selected credentials being made available to Jcode, but no evidence that this package sends them to an unrelated host or performs unauthorized actions.
Static reason
One or more suspicious static signals were detected.
Trigger
The host runs during a managed connector session with a control endpoint.
Impact
This enables the requested agent session to use configured providers; no unrelated collection, transmission, or unauthorized account action was identified.
Mechanism
It starts a local Jcode api-bridge and makes selected existing Jcode and external CLI credentials available in a private JCODE_HOME for Jcode to use.
AI rationale
The flagged process and credential flows are consistent with the package’s stated purpose: starting a private Jcode instance to drive an agent session. The inspected source shows selected credentials being made available to Jcode, but no evidence that this package sends them to an unrelated host or performs unauthorized actions.
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package entry exports the connector extension; its declared scripts are build, typecheck, and test.
- The extension describes its purpose as launching a private Jcode instance and driving one session through Jcode’s Harness API.
- The Jcode SDK shares only selected external CLI credential files into the private JCODE_HOME because Jcode reads them directly.
- The host launches a local Jcode api-bridge and requires a managed control endpoint before running.
Evidence against
- Credential inheritance is enabled by default and includes credentials from other AI CLI tools, so the connector has access to those credentials while running.
- The source also contains process execution and network code, but the inspected execution path ties process launch to the connector’s local Jcode bridge; no unrelated credential transmission or attack behavior was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
6 flaggeddist/host.jsView file
50${cb}`:comment}}if(afterDoc){for(let i=0;i<this.errors.length;++i)doc.errors.push(this.errors[i]);for(let i=0;i<this.warnings.length;++i)doc.warnings.push(this.warnings[i])}else{do...
L51: ${end.comment}`:end.comment}this.doc.range[2]=end.offset;break}default:this.errors.push(new errors.YAMLParseError(getErrorPos(token2),"UNEXPECTED_TOKEN",`Unsupported token ${token2...
L52: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
49${cb}`:comment}else{const cb=dc.commentBefore;dc.commentBefore=cb?`${comment}
L50: ${cb}`:comment}}if(afterDoc){for(let i=0;i<this.errors.length;++i)doc.errors.push(this.errors[i]);for(let i=0;i<this.warnings.length;++i)doc.warnings.push(this.warnings[i])}else{do...
L51: ${end.comment}`:end.comment}this.doc.range[2]=end.offset;break}default:this.errors.push(new errors.YAMLParseError(getErrorPos(token2),"UNEXPECTED_TOKEN",`Unsupported token ${token2...
L52: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/host.jsView on unpkg · L49Findings
4 High2 Medium6 Low
HighChild Processdist/host.js
HighSame File Env Network Executiondist/host.js
HighCommand Output Exfiltrationdist/host.js
HighCross File Remote Execution Contextdist/host.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowEvaldist/host.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to @cotal-ai/connector-jcode@0.132.5.
See all versions of @cotal-ai/connector-jcode for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/connector-jcode@0.132.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.