registry / @vatio-ai/cli / 0.86.1
@vatio-ai/cli@0.86.1
Vatio CLI — deploy and manage Vatio agent workspaces
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the agent-file setup and transcript upload are tied to explicit CLI commands. Runtime telemetry is opt-out, reports command outcome and error metadata to the configured API URL, and defaults to Vatio; no concrete attack behavior was established.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
No attack trigger was found; the setup and sharing paths require user-invoked commands, while telemetry runs after a CLI command when enabled.
Impact
No confirmed attack impact; source inspection found no unconsented agent control-surface mutation or hidden credential disclosure.
Mechanism
The setup writes a Vatio workspace note, skills checks show installation suggestions, transcript sharing requires consent, and telemetry sends command outcome metadata.
AI rationale
The package has no install lifecycle hook, and the agent-file setup and transcript upload are tied to explicit CLI commands. Runtime telemetry is opt-out, reports command outcome and error metadata to the configured API URL, and defaults to Vatio; no concrete attack behavior was established.
Network endpoints2
registry.npmjs.org/@vatio-ai/skills/latestvatio.ai
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the CLI through bin/vatio.mjs and declares no install lifecycle hook.
- The AGENTS.md note is created by the explicit init command in the current directory, and an existing note that mentions Vatio is left unchanged.
- Skills hints inspect agent installation metadata and show suggestions after user-invoked improve commands; they skip in CI or when disabled and keep their check state in Vatio configuration.
- Transcript upload is reachable through the explicit share-session command; without --yes it requires an affirmative terminal response, and the send uses the configured service URL.
- Run telemetry is sent only when telemetry is enabled and a command ran; it reports the command, exit status, and error metadata to the configured API URL. The default URL is Vatio.
- The inspected child-process helper invokes git with fixed arguments to read repository metadata.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
6 flaggedlib/skills-hint.mjsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { existssync, mkdirsync, readfilesync, writefilesync } from "node:fs";
import { homedir } from "node:os";
import { dirname, join, resolve } from "node:path";
import { confighome } from "./config.mjs";
import { paint } from "./support.mjs";
const skill = "vatio-improve";
const version_file = ".vatio-sk[redacted]";
const latest_url = "https://registry.npmjs.org/@vatio-ai/skills/latest";
const show_every_ms = 24 * 60 * 60 * 1000;
const check_every_ms = 24 * 60 * 60 * 1000;
const fetch_timeout_ms = 1_500;
export async function printskillshint(startdir = process.cwd()) {
if (process.env.ci || process.env.vatio_no_skills_hint) return;
const path = join(confighome(), "sk
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
lib/skills-hint.mjsView on unpkgbin/vatio.mjs#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4
High
Semantic Analysis Limited
Findings
3 High2 Medium7 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationlib/skills-hint.mjs
HighSemantic Analysis Limitedbin/vatio.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltalib/support.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencelib/commands/misc.mjs
Affected versions and remediation
This report applies to @vatio-ai/cli@0.86.1.
See all versions of @vatio-ai/cli for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/cli@0.86.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.