registry / @vatio-ai/skills / 1.9.0
@vatio-ai/skills@1.9.0
Agent skills for building and improving a Vatio agent from your coding agent: Claude Code, Codex, Cursor, Gemini CLI, Copilot and any agent that reads SKILL.md
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe package’s installer writes bundled skills into project agent directories, so it carries an agent-extension capability and warrants a warning. The behavior is activated by running its CLI; the inspected manifest has no install lifecycle hook, and the session-sharing skill describes a separate user-requested or offer flow.
Static reason
No blocking static signals were detected.
Trigger
A user runs the vatio-skills command.
Impact
The installed skills can guide an AI agent in that project; session sharing is described as user-requested or offered through a separate flow.
Mechanism
The command copies bundled skill files into .agents/skills and .claude/skills under the selected project directory.
AI rationale
The package’s installer writes bundled skills into project agent directories, so it carries an agent-extension capability and warrants a warning. The behavior is activated by running its CLI; the inspected manifest has no install lifecycle hook, and the session-sharing skill describes a separate user-requested or offer flow.
Evidence
bin/install.mjsskills/vatio-share-session/SKILL.md.agents/skills.claude/skills
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes an installer command that copies its skills into agent skill directories.
- The installer copies package-owned skills into both project-level agent skill directories when run.
- One included skill describes sending a coding session to Vatio, with a separate user request or offer flow.
Evidence against
- The manifest declares a command-line entry point and no install lifecycle hook.
- The installer runs from the command invocation, defaults to the current directory, and supports an explicit target directory.
Behavioral surface
Filesystem
UrlStrings
Source & flagged code
6 flaggedbin/install.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { cpsync, existssync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-init, vatio-improve, vatio-share-session) into
path/.agents/skills and
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/install.mjsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
import { cpsync, existssync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { dirname, join, relative } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path]
copies the vatio skills (vatio-init, vatio-improve, vatio-share-session) into
p
Findings
2 High4 Medium2 Low
HighExternal Ai Agent Control Surface Mutationbin/install.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.mjs
MediumAi Review Evidencepackage.json
MediumAi Review Evidencebin/install.mjs
MediumAi Review Evidenceskills/vatio-share-session/SKILL.md
MediumAi Review Evidencebin/install.mjs
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to @vatio-ai/skills@1.9.0.
See all versions of @vatio-ai/skills for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/skills@1.9.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.