registry / @vatio-ai/cli / 0.100.3
@vatio-ai/cli@0.100.3
Vatio CLI — deploy and manage Vatio agent workspaces
AI Security Review
scanned 12d ago · by lpm-firewall-aiSource inspection found no malicious behavior. The agent-related writes occur through explicit CLI commands, transcript sharing has a consent boundary, and the network behavior is product update, skills-version, or telemetry traffic.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The project note is written by `vatio init`; transcript sharing requires the explicit `vatio share-session` command and consent unless the caller supplies `--yes`.
Impact
No confirmed attack or unauthorized credential transfer was established.
Mechanism
The CLI writes a static Vatio note or hint cache and sends opted-in product telemetry to its configured service. The yaml dependency parses and stringifies YAML data.
AI rationale
Source inspection found no malicious behavior. The agent-related writes occur through explicit CLI commands, transcript sharing has a consent boundary, and the network behavior is product update, skills-version, or telemetry traffic.
Evidence
package.jsonbin/vatio.mjslib/commands/misc.mjslib/skills-hint.mjslib/commands/improve.mjslib/commands/support-commands.mjslib/telemetry.mjslib/config.mjs
Network endpoints3
vatio.airegistry.npmjs.org/@vatio-ai/cli/latestregistry.npmjs.org/@vatio-ai/skills/latest
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares a CLI entry point and the yaml dependency, with no package install hook; the inspected dependency source implements YAML parsing and stringifying.
- The agent-related project write is called from the explicit `vatio init` command and adds a static Vatio workflow note to `AGENTS.md`.
- The skills hint is called after `vatio flags` output, skips CI or an environment opt-out, and records display timing under the Vatio config home.
- `share-session` is an explicit CLI command. Without `--yes`, it asks for confirmation or refuses noninteractive sending; the transcript request uses the configured Vatio base URL.
- Run telemetry sends command, exit status, and error information to the configured CLI events endpoint when enabled; the source provides telemetry opt-outs.
- `askSecret` is described as masking typed or pasted secrets to keep them out of shell history and terminal scrollback.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
6 flaggedlib/skills-hint.mjsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { existssync, mkdirsync, readfilesync, writefilesync } from "node:fs";
import { homedir } from "node:os";
import { dirname, join, resolve } from "node:path";
import { confighome } from "./config.mjs";
import { paint } from "./support.mjs";
const skill = "vatio-improve";
const version_file = ".vatio-sk[redacted]";
const latest_url = "https://registry.npmjs.org/@vatio-ai/skills/latest";
const show_every_ms = 24 * 60 * 60 * 1000;
const check_every_ms = 24 * 60 * 60 * 1000;
const fetch_timeout_ms = 1_500;
export async function printskillshint(startdir = process.cwd()) {
if (process.env.ci || process.env.vatio_no_skills_hint) return;
const path = join(confighome(), "sk
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
lib/skills-hint.mjsView on unpkglib/commands/support-commands.mjs#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5
Findings
3 High2 Medium7 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationlib/skills-hint.mjs
HighSemantic Analysis Limitedlib/commands/support-commands.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltalib/support.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencelib/commands/misc.mjs
LowSuspicious Lifecycle Evidence.lpm-dependency-evidence-8e6ad0c7-ca91-4604-8b08-b36e4eabd5ce/0/npm-linux/browser/dist/doc/applyReviver.js
Affected versions and remediation
This report applies to @vatio-ai/cli@0.100.3.
See all versions of @vatio-ai/cli for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/cli@0.100.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.