registry / @vatio-ai/skills / 2.0.0
@vatio-ai/skills@2.0.0
Vatio skills and MCP for Claude Code, Cursor and Codex: build and test an AI agent for the app you're building with /vatio-init, improve it daily with /vatio-improve and learn what people ask it with /vatio-analyze. Vatio holds the agent; no config files
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe manifest has no lifecycle hooks, and the installer runs only as an invoked CLI to install the advertised skills and MCP configuration. Its limited telemetry is disclosed in the README and installer, has an opt-out, and no credential or project data exfiltration was identified.
Static reason
No blocking static signals were detected.
Trigger
The user runs the vatio-skills CLI; telemetry is sent during that run unless disabled.
Impact
Project agent configuration and skill files are changed as the installer describes; a limited telemetry event goes to Vatio.
Mechanism
The CLI copies skills, adds a Vatio MCP server to project config when enabled, and sends a disclosed install event.
AI rationale
The manifest has no lifecycle hooks, and the installer runs only as an invoked CLI to install the advertised skills and MCP configuration. Its limited telemetry is disclosed in the README and installer, has an opt-out, and no credential or project data exfiltration was identified.
Evidence
.agents/skills/.claude/skills/.mcp.json.cursor/mcp.json~/.vatio/sessions.json
Network endpoints2
vatio.ai/mcpvatio.ai/api/developer/v1/cli/events
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes bin/install.mjs as a CLI and defines no lifecycle scripts.
- The explicitly run installer copies the package's skills and adds the Vatio MCP to project configuration files.
- Install telemetry reports the skills version, coding agent and session; the installer prints a disclosure and supports an opt-out.
- The README documents the telemetry and says the skills have no hooks or automatic behavior; session sharing requires user approval.
Evidence against
- Running the CLI writes files under the target project and may update ~/.vatio/sessions.json.
- The installer sends a telemetry event to Vatio by default when the CLI is run.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
8 flaggedbin/install.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { spawnsync } from "node:child_process";
import { randomuuid } from "node:crypto"
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/install.mjsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { spawnsync } from "node:child_process";
import { randomuuid } from "node:crypto";
import { cpsync, existssync, mkdirsync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { homedir, platform } from "node:os";
import { basename, dirname, join, relative, resolve } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path] [--no-mcp]
copies the vatio skills (vatio-init, vatio-improve, vatio-analyze,
vatio-share-session) into path/.agents/skills and path/.claude/skills,
and adds the vatio mcp (https://vatio.ai/mcp) to path/.mcp.json and,
when there is a path/.cursor, path/.cursor/mcp.json. --
Findings
2 High2 Medium8 Low
HighExternal Ai Agent Control Surface Mutationbin/install.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review EvidenceREADME.md
LowAi Review Evidenceskills/vatio-share-session/SKILL.md
Affected versions and remediation
This report applies to @vatio-ai/skills@2.0.0.
See all versions of @vatio-ai/skills for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/skills@2.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.