registry / @vatio-ai/cli / 0.102.0
@vatio-ai/cli@0.102.0
Vatio CLI — deploy and manage Vatio agent workspaces
AI Security Review
scanned 10d ago · by lpm-firewall-aiSource review found no malicious behavior. The flagged agent note is written by an explicit setup command, and the inspected network and account actions are package-aligned CLI functions.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs vatio init, vatio auth --new-key, or vatio share-session; the package manifest defines no install hook.
Impact
These actions support normal CLI setup and account use; no unrequested agent control change or credential theft was established.
Mechanism
Initialization adds an AGENTS.md note; key generation uses local openssl; session sharing requires confirmation or --yes.
AI rationale
Source review found no malicious behavior. The flagged agent note is written by an explicit setup command, and the inspected network and account actions are package-aligned CLI functions.
Evidence
AGENTS.mdidentity.pemidentity.pub.gitignoreskills-hint.jsonskills-check.json
Network endpoints3
registry.npmjs.org/@vatio-ai/skills/latestregistry.npmjs.org/@vatio-ai/cli/latestvatio.ai
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a user-run CLI and declares yaml as its only dependency; it has no npm lifecycle hook.
- The AGENTS.md write occurs during vatio init, and existing Vatio notes are left alone.
- Skills hints run from improvement commands, can be disabled, and perform a version lookup plus local state writes.
- Enabled routine telemetry sends command results to the configured Vatio API; environment settings can disable it.
- Transcript sharing stops for confirmation unless --yes is given, then requires authorization before sending.
- Key generation and secret administration are command-triggered product operations; new key generation requires --new-key and uses local openssl.
Evidence against
- The flagged agent-configuration write is reached through vatio init, not package installation.
- The YAML dependency manifest has no install script, and the parent manifest has no lifecycle hook.
- The updater runs a version-pinned release of the same CLI after an API reports that the current CLI is outdated.
Behavioral surface
ChildProcess
Source & flagged code
6 flaggedlib/skills-hint.mjsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { existssync, mkdirsync, readfilesync, writefilesync } from "node:fs";
import { homedir } from "node:os";
import { dirname, join, resolve } from "node:path";
import { confighome } from "./config.mjs";
import { paint } from "./support.mjs";
const skill = "vatio-improve";
const version_file = ".vatio-sk[redacted]";
const latest_url = "https://registry.npmjs.org/@vatio-ai/skills/latest";
const show_every_ms = 24 * 60 * 60 * 1000;
const check_every_ms = 24 * 60 * 60 * 1000;
const fetch_timeout_ms = 1_500;
export async function printskillshint(startdir = process.cwd()) {
if (process.env.ci || process.env.vatio_no_skills_hint) return;
const path = join(confighome(), "sk
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
lib/skills-hint.mjsView on unpkglib/commands/support-commands.mjs#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5
Findings
3 High2 Medium7 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationlib/skills-hint.mjs
HighSemantic Analysis Limitedlib/commands/support-commands.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltalib/commands/identity-key.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencelib/commands/misc.mjs
LowSuspicious Lifecycle Evidence.lpm-dependency-evidence-51ac9de4-2288-4ce4-8bc0-9516c14f9e64/0/npm-linux/browser/dist/doc/createNode.js
Affected versions and remediation
This report applies to @vatio-ai/cli@0.102.0.
See all versions of @vatio-ai/cli for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/cli@0.102.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.