registry / @vatio-ai/skills / 1.29.2
@vatio-ai/skills@1.29.2
Vatio skills for Claude Code, Cursor and Codex: add an AI agent to the app you're building with /vatio-init, then improve it daily with /vatio-improve and learn what people ask it with /vatio-analyze.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe agent-configuration writes are the package’s stated purpose and occur only when its CLI is explicitly run, within the selected project. Its disclosed installation telemetry is opt-out and sends package version, coding-agent type, and a session ID to Vatio’s own endpoint; no malicious behavior was identified.
Static reason
No blocking static signals were detected.
Trigger
Explicit invocation of the vatio-skills CLI.
Impact
No malicious impact identified from the inspected source.
Mechanism
Copies skills into project-local agent directories, then posts an installation event to Vatio with the version, coding-agent type, and session ID.
AI rationale
The agent-configuration writes are the package’s stated purpose and occur only when its CLI is explicitly run, within the selected project. Its disclosed installation telemetry is opt-out and sends package version, coding-agent type, and a session ID to Vatio’s own endpoint; no malicious behavior was identified.
Evidence
.agents/skills/<skill>.claude/skills/<skill>~/.vatio/sessions.json
Network endpoints1
vatio.ai/api/developer/v1/cli/events
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes bin/install.mjs as the vatio-skills command; it has no lifecycle scripts.
- When invoked, the installer copies the package’s skills into .agents/skills and .claude/skills under the selected project directory.
- The installer discloses an installation event and supports opt-out through VATIO_TELEMETRY=0 or DO_NOT_TRACK.
- The event goes to Vatio’s /api/developer/v1/cli/events endpoint and reports the skills version, coding-agent type, and a session ID.
- The README describes these skills as instructions with no hooks, MCP servers, or automatic behavior.
Evidence against
- The session ID is stored locally in ~/.vatio/sessions.json and is generated or reused for the project session.
- The installation event is part of the explicitly invoked CLI command, not an install lifecycle hook.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
8 flaggedbin/install.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { spawnsync } from "node:child_process";
import { randomuuid } from "node:crypto";
import { cpsync, existssync, mkdirsync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { homedir, platform } from "node:os";
import { basename, dirname, join, relative, resolve } from "node:path";
import { fileurltopath } from "node:
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/install.mjsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
import { spawnsync } from "node:child_process";
import { randomuuid } from "node:crypto";
import { cpsync, existssync, mkdirsync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { homedir, platform } from "node:os";
import { basename, dirname, join, relative, resolve } from "node:path";
import { fileu
Findings
2 High2 Medium8 Low
HighExternal Ai Agent Control Surface Mutationbin/install.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review EvidenceREADME.md
LowAi Review EvidenceREADME.md
Affected versions and remediation
This report applies to @vatio-ai/skills@1.29.2.
See all versions of @vatio-ai/skills for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/skills@1.29.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.