registry / @vatio-ai/skills / 1.26.4
@vatio-ai/skills@1.26.4
Vatio skills for Claude Code, Cursor and Codex: add an AI agent to the app you're building with /vatio-init, put it in your web, iOS, Android or Flutter app with /vatio-add-to-app, then improve it daily with /vatio-improve and learn what people ask it wit
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe manifest has no lifecycle hook, and the inspected installer is a user-invoked CLI that copies package-owned skills into project-local folders. The skills describe Vatio setup and a related secrets transfer; the inspected source does not establish hidden collection or an unrelated recipient.
Static reason
No blocking static signals were detected.
Trigger
A user runs the package’s command-line installer from a project or supplies a target directory.
Impact
The installer changes project-local agent instructions; no package-side attack or unauthorized transfer was established.
Mechanism
The installer copies bundled skills into project-local agent folders and removes a renamed skill only when its contents identify it as package-installed. The skills describe Vatio setup actions, including sending a configured value through Vatio’s secrets command.
AI rationale
The manifest has no lifecycle hook, and the inspected installer is a user-invoked CLI that copies package-owned skills into project-local folders. The skills describe Vatio setup and a related secrets transfer; the inspected source does not establish hidden collection or an unrelated recipient.
Evidence
bin/install.mjs.agents/skills.claude/skills
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a command-line installer and includes the installer and bundled skills.
- The installer takes its target from the current directory or an explicit directory argument, so installation is user-invoked.
- The installer copies the package’s skills into project-local agent skill folders.
- The legacy skill cleanup runs only when the existing skill file identifies it as installed by this package.
- The setup skill says to get user confirmation before changing the project; the session-sharing skill requires asking before sending a session.
Evidence against
- The setup skill directs an agent to send a value from the shell or project environment file to Vatio through its secrets command without stopping to ask; this is a credential-transfer capability for the package’s stated setup function.
Behavioral surface
Filesystem
UrlStrings
Source & flagged code
9 flaggedbin/install.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { cpsync, existssync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-init, vatio-add-to-app, vatio-improve,
vatio-analyze, vatio-share-sess
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/install.mjsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
import { cpsync, existssync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-init, vatio-add-to-app, vatio-improve,
vatio-ana
Findings
2 High9 Low
HighExternal Ai Agent Control Surface Mutationbin/install.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.mjs
LowFilesystem
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review Evidenceskills/vatio-init/SKILL.md
LowAi Review Evidenceskills/vatio-share-session/SKILL.md
LowAi Review Evidenceskills/vatio-init/SKILL.md
Affected versions and remediation
This report applies to @vatio-ai/skills@1.26.4.
See all versions of @vatio-ai/skills for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/skills@1.26.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.