registry / @cotal-ai/connector-jcode / 0.133.13
@cotal-ai/connector-jcode@0.133.13
Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged process execution supports the package's stated role as a Jcode connector: it starts a local Jcode API bridge and prepares a separate instance. Credential inheritance targets that instance's local Jcode state, and the inspected source did not show credentials being sent to an unrelated host.
Static reason
One or more suspicious static signals were detected.
Trigger
The host launcher runs when the managed connector starts; importing the package registers and exports the connector.
Impact
No malicious or unrelated credential use was identified in the inspected flows.
Mechanism
The host starts Jcode's local API bridge and prepares a separate instance home, inheriting Jcode credentials for that local instance.
AI rationale
The flagged process execution supports the package's stated role as a Jcode connector: it starts a local Jcode API bridge and prepares a separate instance. Credential inheritance targets that instance's local Jcode state, and the inspected source did not show credentials being sent to an unrelated host.
Evidence
Jcode credential files in the user's Jcode home and the private instance home
Network endpoints2
broker.cotal.ai/v1/feedbackcotal.ai/v1/feedback
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exports a connector entry point and depends on the Jcode SDK.
- The host starts Jcode's local api-bridge process with a private JCODE_HOME and socket.
- Credential inheritance copies or links Jcode credential files into the separate instance home for local use.
Evidence against
- No install lifecycle scripts are declared.
- The package entry registers and exports the connector; the host process requires a managed control endpoint before starting.
- The inspected credential flow prepares local Jcode state; no credential transmission to an unrelated host was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
7 flaggeddist/host.jsView file
111L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
111L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
L114: Your last answer was refused: ${a.refused}`:"";return`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/host.jsView on unpkg · L111109L110: `)}}doc.write(`payload.value = newResult;`);doc.write(`return payload;`);const fn=doc.compile();return(payload,ctx)=>fn(shape,payload,ctx)};let fastpass;const isObject2=isObject;co...
L111:
L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
L114: Your last answer was refused: ${a.refused}`:"";return`
Findings
5 High4 Medium5 Low
HighChild Processdist/host.js
HighSame File Env Network Executiondist/host.js
HighCommand Output Exfiltrationdist/host.js
HighCross File Remote Execution Contextdist/host.js
HighShips High Entropy Blobdist/docs-bundle.bin
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobdist/docs-bundle.bin
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/host.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cotal-ai/connector-jcode@0.133.13.
See all versions of @cotal-ai/connector-jcode for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/connector-jcode@0.133.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.