registry / @vatio-ai/cli / 0.133.0
@vatio-ai/cli@0.133.0
Vatio CLI — deploy and manage Vatio agent workspaces
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged agent configuration write is confined to the explicit vatio init command. Runtime telemetry is disclosed with an opt-out, and transcript sharing requires explicit user action; no credential theft or unrelated automatic action was found.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
CLI command execution; workspace setup requires vatio init, and transcript sharing requires an explicit share-session command with confirmation or --yes.
Impact
No malicious behavior found; expected telemetry and user-requested workspace setup.
Mechanism
Telemetry reports command outcome metadata to Vatio and can be disabled. The skills hint fetches version metadata from the npm registry. Init writes a workspace manifest and an AGENTS.md note.
AI rationale
The flagged agent configuration write is confined to the explicit vatio init command. Runtime telemetry is disclosed with an opt-out, and transcript sharing requires explicit user action; no credential theft or unrelated automatic action was found.
Evidence
AGENTS.mdskills-hint.jsontelemetry-notice
Network endpoints2
vatio.airegistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI executable and declares no lifecycle scripts.
- Runtime telemetry is disclosed, excludes arguments, file contents and secrets, and can be disabled with VATIO_TELEMETRY=0 or DO_NOT_TRACK=1.
- The AGENTS.md write is part of the explicit vatio init command, which also creates a workspace manifest.
- Session transcripts are sent only through the explicit share-session flow, which asks for confirmation unless --yes is supplied.
- The skills hint checks the npm registry for a version and stores local hint state; it does not install or modify agent skills.
Evidence against
- The CLI sends default runtime usage telemetry to Vatio, including command labels and error information.
- vatio init writes a Vatio section into the workspace’s AGENTS.md file.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedlib/skills-hint.mjsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { existssync, mkdirsync, readfilesync, writefilesync } from "node:fs";
import { homedir } from "node:os";
import { dirname, join, resolve } from "node:path";
import { confighome } from "./config.mjs";
import { paint } from "./support.mjs";
const skill = "vatio-improve";
const version_file = ".vatio-sk[redacted]";
const latest_url = "https://registry.npmjs.org/@vatio-ai/skills/latest";
const show_every_ms = 24 * 60 * 60 * 1000;
const check_every_ms = 24 * 60 * 60 * 1000;
const fetch_timeout_ms = 1_500;
export async function printskillshint(startdir = process.cwd()) {
if (process.env.ci || process.env.vatio_no_skills_hint) return;
const path = join(confighome(), "sk
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
lib/skills-hint.mjsView on unpkglib/commands/improve.mjs#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
8 High2 Medium4 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationlib/skills-hint.mjs
HighSemantic Analysis Limitedlib/commands/improve.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritylib/codex-session.mjs
HighKnown Malware Source Similaritylib/update-notice.mjs
HighKnown Malware Source Similaritylib/commands/identity-key.mjs
HighKnown Malware Source Similaritylib/release-notes.mjs
HighKnown Malware Source Similaritylib/docs-sections.mjs
HighPrevious Version Dangerous Deltalib/support.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @vatio-ai/cli@0.133.0.
See all versions of @vatio-ai/cli for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/cli@0.133.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.