registry / @vatio-ai/skills / 1.21.0
@vatio-ai/skills@1.21.0
Vatio skills for Claude Code, Cursor and Codex: add an AI agent to the app you're building with /vatio-init, put it in your web, iOS, Android or Flutter app with /vatio-add-to-app, then improve it daily with /vatio-improve and learn what people ask it wit
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe package provides an explicitly invoked installer for its own agent skills, with no lifecycle hook in the inspected manifest. Its skill instructions gate project permission changes and session sharing on user consent, so the agent-control findings do not establish an attack.
Static reason
No blocking static signals were detected.
Trigger
The user runs the `vatio-skills` CLI, normally with `npx @vatio-ai/skills`.
Impact
The skills become available to coding agents in that project. The inspected source does not establish an unconsented attack or automatic agent-setting change.
Mechanism
The installer copies bundled skills into the selected project and writes a version marker; it only removes the renamed skill when its contents match the expected package skill name.
AI rationale
The package provides an explicitly invoked installer for its own agent skills, with no lifecycle hook in the inspected manifest. Its skill instructions gate project permission changes and session sharing on user consent, so the agent-control findings do not establish an attack.
Evidence
bin/install.mjs.agents/skills.claude/skills.claude/settings.json
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the `vatio-skills` CLI; the inspected manifest has no lifecycle hook.
- The installer copies bundled skills into the selected project’s `.agents/skills` and `.claude/skills` directories when run.
- The installer removes a renamed skill directory only when its `SKILL.md` contains the expected skill name.
- The initialization instructions say to add a project Claude permission rule only with the user’s approval, merging it without replacing existing settings or adding other rules.
- The session-sharing instructions require asking the user and say never to send the session without their choice.
- The plugin instructions require an explicit installation step; automatic updates must be enabled by the user.
Evidence against
Behavioral surface
Filesystem
UrlStrings
Source & flagged code
10 flaggedbin/install.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { cpsync, existssync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-init, vatio-add-to-app, vatio-improve,
vatio-analyze, vatio-share-sess
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/install.mjsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
import { cpsync, existssync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-init, vatio-add-to-app, vatio-improve,
vatio-ana
Findings
2 High10 Low
HighExternal Ai Agent Control Surface Mutationbin/install.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.mjs
LowFilesystem
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/install.mjs
LowAi Review EvidenceREADME.md
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review Evidenceskills/vatio-init/SKILL.md
LowAi Review Evidenceskills/vatio-share-session/SKILL.md
LowAi Review EvidenceREADME.md
Affected versions and remediation
This report applies to @vatio-ai/skills@1.21.0.
See all versions of @vatio-ai/skills for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/skills@1.21.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.