registry / @vatio-ai/cli / 0.98.0
@vatio-ai/cli@0.98.0
Vatio CLI — deploy and manage Vatio agent workspaces
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe flagged skills-hint location reads plugin and project skill metadata, while its caller is a user-run CLI command and its persisted timing state is in the CLI configuration directory. No install lifecycle hook or concrete attack behavior was identified; the dependency coverage paths are YAML implementation modules.
Static reason
No blocking static signals were detected.
Trigger
A user runs the CLI init command or an improve flags command.
Impact
These behaviors do not establish unconsented install-time agent configuration changes or another concrete attack surface.
Mechanism
The init helper conditionally writes a Vatio note to the project AGENTS.md; the skills hint reads agent skill metadata and stores display timing in the CLI configuration directory.
AI rationale
The flagged skills-hint location reads plugin and project skill metadata, while its caller is a user-run CLI command and its persisted timing state is in the CLI configuration directory. No install lifecycle hook or concrete attack behavior was identified; the dependency coverage paths are YAML implementation modules.
Evidence
lib/commands/misc.mjslib/skills-hint.mjslib/commands/improve.mjs
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares the CLI entrypoint and YAML dependency, with no install lifecycle scripts.
- The AGENTS.md note is written by a CLI init helper, which adds a Vatio section only when the file does not already mention Vatio.
- The skills hint reads Claude plugin and project skill metadata; its caller invokes it during the user-run flags command, and its saved state is under the CLI config directory.
- The inspected dependency files are YAML parsing, schema, composition, logging, and stringification modules; its manifest describes a JavaScript YAML parser and stringifier.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flaggedlib/skills-hint.mjsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { existssync, mkdirsync, readfilesync, writefilesync } from "node:fs";
import { homedir } from "node:os";
import { dirname, join, resolve } from "node:path";
import { confighome } from "./config.mjs";
import { paint } from "./support.mjs";
const skill = "vatio-improve";
const version_file = ".vatio-sk[redacted]";
const latest_url = "https://registry.npmjs.org/@vatio-ai/skills/latest";
const show_every_ms = 24 * 60 * 60 * 1000;
const check_every_ms = 24 * 60 * 60 * 1000;
const fetch_timeout_ms = 1_500;
export async function printskillshint(startdir = process.cwd()) {
if (process.env.ci || process.env.vatio_no_skills_hint) return;
const path = join(confighome(), "sk
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
lib/skills-hint.mjsView on unpkg77".claude");
const found = [];
const plugin = pluginVersion(join(claudeHome, "plugins", "installed_plugins.json"));
if (plugin !== undefined) found.push({ kind: "plugin", vers
Low
Ai Review Evidence
The skills hint reads Claude plugin and project skill metadata; its caller invokes it during the user-run flags command, and its saved state is under the CLI config directory.
lib/skills-hint.mjsView on unpkg · L77Findings
2 High2 Medium8 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationlib/skills-hint.mjs
HighSemantic Analysis Limitedlib/commands/improve.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencelib/commands/misc.mjs
LowAi Review Evidencelib/skills-hint.mjs
LowSuspicious Dependency Evidence.lpm-dependency-evidence-c9219ffe-6340-4f6f-9b09-0784130fadbc/0/npm-linux/browser/dist/schema/common/seq.js
Affected versions and remediation
This report applies to @vatio-ai/cli@0.98.0.
See all versions of @vatio-ai/cli for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/cli@0.98.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.