registry / @vatio-ai/cli / 0.126.0
@vatio-ai/cli@0.126.0
Vatio CLI — deploy and manage Vatio agent workspaces
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged agent-instruction write occurs only as part of the user-run `vatio init` workspace setup command. Skills hints are command-triggered, and the default telemetry is disclosed, opt-out capable, and sent to the configured Vatio API; the reviewed source shows no malicious behavior.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI; workspace instruction writes require the explicit `vatio init` command, and skills hints follow selected test commands.
Impact
No unauthorized credential transfer, unrelated collection, or automatic agent-control change was identified.
Mechanism
The CLI contacts Vatio’s configured API and npm’s registry for its own service data and version hints; it writes workspace setup files or small config caches.
AI rationale
The flagged agent-instruction write occurs only as part of the user-run `vatio init` workspace setup command. Skills hints are command-triggered, and the default telemetry is disclosed, opt-out capable, and sent to the configured Vatio API; the reviewed source shows no malicious behavior.
Evidence
${process.cwd()}/vatio.yml${process.cwd()}/AGENTS.md${configHome()}/skills-hint.json${configHome()}/skills-check.json${configHome()}/update-check.json${configHome()}/sessions.json
Network endpoints3
${config.resolveBaseUrl()}/api/developer/v1/cli/eventsregistry.npmjs.org/@vatio-ai/skills/latestregistry.npmjs.org/@vatio-ai/cli/latest
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a `vatio` CLI entry point and declares no package main or exports.
- `vatio init` is an explicit CLI command; it creates the workspace manifest and adds a Vatio-specific note to that directory’s `AGENTS.md`.
- The skills hint runs after `vatio test list` output or saving, and can be disabled with `VATIO_NO_SKILLS_HINT`; it records hint state under Vatio’s config home.
- Runtime telemetry is described to users, has `VATIO_TELEMETRY=0` and `DO_NOT_TRACK=1` opt-outs, and reports command outcomes to the configured Vatio API endpoint.
Evidence against
- Telemetry is enabled by default and may include an error message when a command fails.
- `vatio init` writes agent instructions in the workspace directory, but only when that explicit command is run.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedlib/skills-hint.mjsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { existssync, mkdirsync, readfilesync, writefilesync } from "node:fs";
import { homedir } from "node:os";
import { dirname, join, resolve } from "node:path";
import { confighome } from "./config.mjs";
import { paint } from "./support.mjs";
const skill = "vatio-improve";
const version_file = ".vatio-sk[redacted]";
const latest_url = "https://registry.npmjs.org/@vatio-ai/skills/latest";
const show_every_ms = 24 * 60 * 60 * 1000;
const check_every_ms = 24 * 60 * 60 * 1000;
const fetch_timeout_ms = 1_500;
export async function printskillshint(startdir = process.cwd()) {
if (process.env.ci || process.env.vatio_no_skills_hint) return;
const path = join(confighome(), "sk
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
lib/skills-hint.mjsView on unpkglib/commands/improve.mjs#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7
High
Findings
3 High2 Medium7 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationlib/skills-hint.mjs
HighSemantic Analysis Limitedlib/commands/improve.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltalib/support.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowAi Review Evidencepackage.json
LowAi Review Evidencebin/vatio.mjs
LowAi Review Evidencelib/commands/misc.mjs
Affected versions and remediation
This report applies to @vatio-ai/cli@0.126.0.
See all versions of @vatio-ai/cli for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/cli@0.126.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.