registry / @cotal-ai/connector-jcode / 0.133.10
@cotal-ai/connector-jcode@0.133.10
Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged credential and process behavior is consistent with a Jcode connector: credentials are mirrored into its private local runtime, and the bridge is launched for managed sessions. The inspected network paths concern Cotal feedback and optional documentation refresh; no malicious data flow was found.
Static reason
One or more suspicious static signals were detected.
Trigger
The connector's host starts during a managed runtime session; no install hook is declared.
Impact
No malicious credential transfer, unrelated collection, or harmful automatic account action was identified.
Mechanism
The host prepares a private Jcode home, mirrors credentials for the local Jcode runtime, and starts its Harness API bridge.
AI rationale
The flagged credential and process behavior is consistent with a Jcode connector: credentials are mirrored into its private local runtime, and the bridge is launched for managed sessions. The inspected network paths concern Cotal feedback and optional documentation refresh; no malicious data flow was found.
Network endpoints3
broker.cotal.aicotal.aidocs.cotal.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exports its JavaScript entry through dist/index.js and declares no install lifecycle hook.
- The host mirrors credentials into a private Jcode home as part of starting the connector.
- The connector starts Jcode through its Harness API bridge with SDK login inheritance disabled.
- The identified network calls support Cotal feedback submission and optional documentation refresh; no credential or command-output exfiltration was identified.
Evidence against
- The host reads and copies credentials from known credential stores.
- The package launches a local child process and includes network calls.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
7 flaggeddist/host.jsView file
111L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
111L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
L114: Your last answer was refused: ${a.refused}`:"";return`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/host.jsView on unpkg · L111109L110: `)}}doc.write(`payload.value = newResult;`);doc.write(`return payload;`);const fn=doc.compile();return(payload,ctx)=>fn(shape,payload,ctx)};let fastpass;const isObject2=isObject;co...
L111:
L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
L114: Your last answer was refused: ${a.refused}`:"";return`
Findings
5 High4 Medium5 Low
HighChild Processdist/host.js
HighSame File Env Network Executiondist/host.js
HighCommand Output Exfiltrationdist/host.js
HighCross File Remote Execution Contextdist/host.js
HighShips High Entropy Blobdist/docs-bundle.bin
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobdist/docs-bundle.bin
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/host.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cotal-ai/connector-jcode@0.133.10.
See all versions of @cotal-ai/connector-jcode for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/connector-jcode@0.133.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.