registry / @vatio-ai/skills / 1.14.2
@vatio-ai/skills@1.14.2
Vatio skills for Claude Code, Cursor and Codex: add an AI agent to the app you're building with /vatio-init, then improve it daily with /vatio-improve.
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe flagged configuration writes are limited to project-local skill setup through an explicitly run CLI command. The manifest has no lifecycle hook, and the installer’s cleanup is ownership-checked; no concrete attack behavior was found.
Static reason
No blocking static signals were detected.
Trigger
A user runs the package’s command-line installer.
Impact
This sets up or updates the package’s skills in the selected project. The inspected source establishes no independent attack behavior.
Mechanism
The installer copies packaged skill folders into the selected project’s agent skill directories and writes a version marker; its renamed-skill cleanup checks ownership first.
AI rationale
The flagged configuration writes are limited to project-local skill setup through an explicitly run CLI command. The manifest has no lifecycle hook, and the installer’s cleanup is ownership-checked; no concrete attack behavior was found.
Evidence
package.jsonbin/install.mjsREADME.md
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the installer as a command-line tool and declares no lifecycle hook.
- The installer copies packaged skills into two project-local agent skill directories and adds a version marker.
- The command uses the current directory by default and accepts a directory supplied by the user.
- The README documents running the installer as an explicit setup command.
- Cleanup removes a renamed skill directory only when its contents identify it as this package’s copy.
Evidence against
- The installer can overwrite skill files in the selected project’s agent skill directories.
Behavioral surface
Filesystem
UrlStrings
Source & flagged code
7 flaggedbin/install.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { cpsync, existssync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-init, vatio-improve, vatio-share-session) into
path/.agents/skills and
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/install.mjsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
import { cpsync, existssync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-init, vatio-improve, vatio-share-session) into
p
Findings
2 High7 Low
HighExternal Ai Agent Control Surface Mutationbin/install.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.mjs
LowFilesystem
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review EvidenceREADME.md
LowAi Review Evidencebin/install.mjs
Affected versions and remediation
This report applies to @vatio-ai/skills@1.14.2.
See all versions of @vatio-ai/skills for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/skills@1.14.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.