registry / @cotal-ai/connector-jcode / 0.135.7
@cotal-ai/connector-jcode@0.135.7
Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe manifest has no install lifecycle hooks, and the flagged process execution starts a local Jcode API bridge for the connector. Credential mirroring is automatic but supports the private Jcode instance’s provider access; the reviewed source did not show those credentials being sent to an unrelated collector.
Static reason
One or more suspicious static signals were detected.
Trigger
The host starts as part of a managed Jcode connector session; feedback submission is a separate feature action.
Impact
No malicious collection, unrelated credential transmission, or harmful automatic action was identified.
Mechanism
The host prepares a private Jcode home, mirrors credential files for the instance, and launches a local API bridge. Feedback targets Cotal’s service.
AI rationale
The manifest has no install lifecycle hooks, and the flagged process execution starts a local Jcode API bridge for the connector. Credential mirroring is automatic but supports the private Jcode instance’s provider access; the reviewed source did not show those credentials being sent to an unrelated collector.
Evidence
private Jcode home and runtime paths; exact paths are derived at runtime
Network endpoints4
broker.cotal.aicotal.aidocs.cotal.aijcode.sh
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has no install, preinstall, or postinstall hook; its scripts are development and build commands.
- The host creates a private Jcode instance and prepares credentials for that instance when the host starts.
- The Jcode SDK starts a local `api-bridge` process; the reviewed code shows no unrelated downloaded code being executed.
- The feedback URLs point to Cotal’s own service.
Evidence against
- Host startup automatically mirrors recognized local Jcode and other provider credential files into the private Jcode home; this is sensitive behavior, though consistent with running Jcode using available provider logins.
- The package includes compressed documentation bundles, but no harmful behavior was established from them.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinified
Source & flagged code
7 flaggeddist/host.jsView file
111L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
High
111L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
L114: ${context}
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/host.jsView on unpkg · L111109L110: `)}}doc.write(`payload.value = newResult;`);doc.write(`return payload;`);const fn=doc.compile();return(payload,ctx)=>fn(shape,payload,ctx)};let fastpass;const isObject2=isObject;co...
L111:
L112: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}}}for(const entry of ctx.seen.entries()){const seen=entry[1];if(schema===entry[0]){extractToDef(e...
L113: `}}function tryAcquireOnce({path:path4,nonce:nonce3,content}){if(publishAtomic(path4,content)){let released=false;return{kind:"acquired",held:{nonce:nonce3,release(){if(released)re...
L114: ${context}
Findings
5 High4 Medium5 Low
HighChild Processdist/host.js
HighSame File Env Network Executiondist/host.js
HighCommand Output Exfiltrationdist/host.js
HighCross File Remote Execution Contextdist/host.js
HighShips High Entropy Blobdist/docs-bundle.bin
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobdist/docs-bundle.bin
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/host.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cotal-ai/connector-jcode@0.135.7.
See all versions of @cotal-ai/connector-jcode for other recorded verdicts.
- Review the evidence and your use of @cotal-ai/connector-jcode@0.135.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.