Cotrace

• Analyzed: May 15, 2026, 8:41 PM
• Findings: 1
• Version: 1.2.0
• Hash: a85ea7730fae933345f55fb2b3fe1b0862871e6dc01c92785b36b5f0998bcb91
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'cotrace' skill is designed to collect and summarize user work activity using Pieces OS and a specialized CLI tool called 'ftc'. The installation process in 'references/install.md' involves installing a global NPM package (@autolabz/ftc-cli) and configuring an external API endpoint (autolab-server.site), which are high-privilege actions but are transparently documented and directly support the stated purpose. There is no evidence of intentional malicious behavior, stealth, or unauthorized data exfiltration beyond the work summaries the tool is explicitly built to manage.