registry / @vatio-ai/skills / 1.3.1
@vatio-ai/skills@1.3.1
Agent skills for building and improving a Vatio agent from your coding agent: Claude Code, Codex, Cursor, Gemini CLI, Copilot and any agent that reads SKILL.md
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe manifest exposes an explicit CLI and declares no install lifecycle hook. Its source copies package-owned skills into agent skill directories only when invoked, consistent with first-party skill setup.
Static reason
No blocking static signals were detected.
Trigger
A user runs the vatio-skills CLI, optionally specifying --dir PATH.
Impact
The Vatio skills become available to coding agents in that directory; no malicious effect was established.
Mechanism
The installer copies the package's bundled skills into .agents/skills and .claude/skills under the selected directory.
AI rationale
The manifest exposes an explicit CLI and declares no install lifecycle hook. Its source copies package-owned skills into agent skill directories only when invoked, consistent with first-party skill setup.
Evidence
.agents/skills.claude/skills
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes bin/install.mjs as an explicit CLI; no install lifecycle hook is declared.
- The installer defaults to the current directory and accepts a user-supplied --dir path.
- When run, the installer copies this package's own skills into .agents/skills and .claude/skills, matching its stated purpose.
Evidence against
Behavioral surface
Filesystem
UrlStrings
Source & flagged code
6 flaggedbin/install.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { cpsync, existssync, readdirsync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-new, vatio-improve) into path/.agents/skills and
path/.claude/skills. path defaults to the current director
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/install.mjsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
import { cpsync, existssync, readdirsync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-new, vatio-improve) into path/.agents/skills and
path/.claude/skills. path defaults t
Findings
2 High6 Low
HighExternal Ai Agent Control Surface Mutationbin/install.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.mjs
LowFilesystem
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review Evidence.claude-plugin/plugin.json
Affected versions and remediation
This report applies to @vatio-ai/skills@1.3.1.
See all versions of @vatio-ai/skills for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/skills@1.3.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.