registry / @vatio-ai/cli / 0.108.0
@vatio-ai/cli@0.108.0
Vatio CLI — deploy and manage Vatio agent workspaces
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe reviewed behavior fits a Vatio workspace CLI: its project guidance writes are part of explicit initialization, and its default runtime telemetry is disclosed with an opt-out. The flagged skills hint writes CLI cache state rather than agent instructions or settings.
Static reason
No blocking static signals were detected.
Trigger
Telemetry runs after CLI commands by default; registry checks and the skills hint run only for eligible commands; workspace and AGENTS.md setup runs through `vatio init`.
Impact
No malicious impact identified. Telemetry can be disabled with VATIO_TELEMETRY=0, and project guidance is written only when init is requested.
Mechanism
Runtime events go to the configured Vatio API; version checks query the npm registry; init writes workspace guidance in the current project.
AI rationale
The reviewed behavior fits a Vatio workspace CLI: its project guidance writes are part of explicit initialization, and its default runtime telemetry is disclosed with an opt-out. The flagged skills hint writes CLI cache state rather than agent instructions or settings.
Evidence
~/.vatio/telemetry-notice~/.vatio/sessions.json~/.vatio/update-check.json~/.vatio/skills-hint.json~/.vatio/skills-check.json<current directory>/vatio.yml<current directory>/AGENTS.md
Network endpoints3
vatio.ai/api/developer/v1/cli/events (or the configured base URL)registry.npmjs.org/@vatio-ai/cli/latestregistry.npmjs.org/@vatio-ai/skills/latest
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI entry point, with no install lifecycle scripts in the manifest.
- The AGENTS.md and workspace manifest writes are performed by the explicitly invoked `init` command.
- The skills hint runs after selected commands and stores hint/check state under the CLI config directory.
- Runtime telemetry is disclosed, excludes arguments and file contents, and can be disabled with VATIO_TELEMETRY=0.
Evidence against
- Runtime command outcome telemetry is enabled by default and may include an error message.
- The skills hint and update check contact the npm registry during eligible CLI commands.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flaggedlib/skills-hint.mjsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { existssync, mkdirsync, readfilesync, writefilesync } from "node:fs";
import { homedir } from "node:os";
import { dirname, join, resolve } from "node:path";
import { confighome } from "./config.mjs";
import { paint } from "./support.mjs";
const skill = "vatio-improve";
const version_file = ".vatio-sk[redacted]";
const latest_url = "https://registry.npmjs.org/@vatio-ai/skills/latest";
const show_every_ms = 24 * 60 * 60 * 1000;
const check_every_ms = 24 * 60 * 60 * 1000;
const fetch_timeout_ms = 1_500;
export async function printskillshint(startdir = process.cwd()) {
if (process.env.ci || process.env.vatio_no_skills_hint) return;
const path = join(confighome(), "sk
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
lib/skills-hint.mjsView on unpkg32export async function printSkillsHint(startDir = process.cwd()) {
if (process.env.CI || process.env.VATIO_NO_SKILLS_HINT) return;
const path = join(configHome(), "sk[redacted]"
Low
Ai Review Evidence
The skills hint runs after selected commands and stores hint/check state under the CLI config directory.
lib/skills-hint.mjsView on unpkg · L32Findings
2 High2 Medium8 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationlib/skills-hint.mjs
HighSemantic Analysis Limitedlib/commands/support-commands.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/vatio.mjs
LowAi Review Evidencelib/commands/misc.mjs
LowAi Review Evidencelib/skills-hint.mjs
Affected versions and remediation
This report applies to @vatio-ai/cli@0.108.0.
See all versions of @vatio-ai/cli for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/cli@0.108.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.