registry / @cotal-ai/connector-jcode / 0.132.6
@cotal-ai/connector-jcode@0.132.6
Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged execution and credential access are part of the package’s stated Jcode connector behavior: the host prepares a private Jcode home and launches a local bridge. No install hook or source evidence of credential exfiltration or other attack behavior was found.
Static reason
One or more suspicious static signals were detected.
Trigger
When the Cotal framework starts the Jcode connector host.
Impact
Jcode can use the configured provider logins for the connector’s intended agent function; no credential exfiltration or unrelated account action was identified.
Mechanism
The host mirrors recognized login files into a private Jcode home and starts a local Jcode API bridge.
AI rationale
The flagged execution and credential access are part of the package’s stated Jcode connector behavior: the host prepares a private Jcode home and launches a local bridge. No install hook or source evidence of credential exfiltration or other attack behavior was found.
Evidence
<private Jcode home>/auth.json<private Jcode home>/openai-auth.json<private Jcode home>/config/jcode/*.env<private Jcode home>/external/
Network endpoints2
broker.cotal.aicotal.ai
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes this as a Cotal connector driven through Jcode’s Harness API and declares no install lifecycle hook.
- When the connector host starts, it mirrors recognized Jcode and provider credential files into a private Jcode home, then launches the local Jcode API bridge.
- The bridge launch disables the SDK’s separate login inheritance; I found no source path that sends the mirrored credentials to Cotal.
Evidence against
- Host startup automatically copies recognized credentials from Jcode, provider config, and other agent login stores into the connector’s private Jcode home.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flaggeddist/host.jsView file
50${cb}`:comment}}if(afterDoc){for(let i=0;i<this.errors.length;++i)doc.errors.push(this.errors[i]);for(let i=0;i<this.warnings.length;++i)doc.warnings.push(this.warnings[i])}else{do...
L51: ${end.comment}`:end.comment}this.doc.range[2]=end.offset;break}default:this.errors.push(new errors.YAMLParseError(getErrorPos(token2),"UNEXPECTED_TOKEN",`Unsupported token ${token2...
L52: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
49${cb}`:comment}else{const cb=dc.commentBefore;dc.commentBefore=cb?`${comment}
L50: ${cb}`:comment}}if(afterDoc){for(let i=0;i<this.errors.length;++i)doc.errors.push(this.errors[i]);for(let i=0;i<this.warnings.length;++i)doc.warnings.push(this.warnings[i])}else{do...
L51: ${end.comment}`:end.comment}this.doc.range[2]=end.offset;break}default:this.errors.push(new errors.YAMLParseError(getErrorPos(token2),"UNEXPECTED_TOKEN",`Unsupported token ${token2...
L52: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/host.jsView on unpkg · L49Findings
4 High2 Medium6 Low
HighChild Processdist/host.js
HighSame File Env Network Executiondist/host.js
HighCommand Output Exfiltrationdist/host.js
HighCross File Remote Execution Contextdist/host.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowEvaldist/host.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @cotal-ai/connector-jcode@0.132.6.
See all versions of @cotal-ai/connector-jcode for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/connector-jcode@0.132.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.