registry / @vatio-ai/skills / 1.27.1
@vatio-ai/skills@1.27.1
Vatio skills for Claude Code, Cursor and Codex: add an AI agent to the app you're building with /vatio-init, then improve it daily with /vatio-improve and learn what people ask it with /vatio-analyze.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe manifest has no lifecycle scripts or import entry point, and its CLI performs project-local skill installation only when explicitly invoked. The reviewed skill instructions describe user-triggered workflows and require agreement before sharing a coding session.
Static reason
No blocking static signals were detected.
Trigger
A user invokes the vatio-skills CLI to install or update the skills in a project.
Impact
The project receives Vatio skill instructions. Session sharing requires user agreement, and no install-time or import-time attack behavior was identified.
Mechanism
The CLI copies the package’s skill files and version markers into project-local agent skill directories; the skills themselves give instructions to the coding agent.
AI rationale
The manifest has no lifecycle scripts or import entry point, and its CLI performs project-local skill installation only when explicitly invoked. The reviewed skill instructions describe user-triggered workflows and require agreement before sharing a coding session.
Evidence
.agents/skills/*.claude/skills/*
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI binary and no import entry point; it has no lifecycle scripts.
- The installer runs when invoked and copies the package’s skills into project-local .agents/skills and .claude/skills directories.
- Session sharing instructions require showing the user what would be sent and getting their agreement before sending.
- The README describes the skills as instructions with no hooks, MCP servers, or automatic execution.
Evidence against
Behavioral surface
Filesystem
UrlStrings
Source & flagged code
7 flaggedbin/install.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { cpsync, existssync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-init, vatio-improve, vatio-analyze,
vatio-share-session) into path/.ag
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/install.mjsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
import { cpsync, existssync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-init, vatio-improve, vatio-analyze,
vatio-share-
Findings
2 High7 Low
HighExternal Ai Agent Control Surface Mutationbin/install.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.mjs
LowFilesystem
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review Evidenceskills/vatio-share-session/SKILL.md
LowAi Review EvidenceREADME.md
Affected versions and remediation
This report applies to @vatio-ai/skills@1.27.1.
See all versions of @vatio-ai/skills for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/skills@1.27.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.