registry / @vatio-ai/skills / 2.1.0
@vatio-ai/skills@2.1.0
Vatio skills and MCP for Claude Code, Cursor and Codex: build and test an AI agent for the app you're building with /vatio-init, improve it daily with /vatio-improve and learn what people ask it with /vatio-analyze. Vatio holds the agent; no config files
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package's only executable entry is a user-run installer that writes its own skills and the advertised MCP integration into the project. It sends disclosed install telemetry to Vatio with an opt-out, and the inspected source shows no harmful data collection or unrelated behavior.
Static reason
No blocking static signals were detected.
Trigger
A user runs the vatio-skills CLI, for example through npx; install telemetry follows unless disabled.
Impact
The project receives the package's advertised skills and MCP integration; the disclosed event supports install analytics and does not include project contents.
Mechanism
The CLI copies its skills into project agent directories, adds the Vatio MCP endpoint to project config unless --no-mcp is used, and sends an install event to the configured Vatio base URL unless telemetry is disabled.
AI rationale
The package's only executable entry is a user-run installer that writes its own skills and the advertised MCP integration into the project. It sends disclosed install telemetry to Vatio with an opt-out, and the inspected source shows no harmful data collection or unrelated behavior.
Evidence
.agents/skills/<skill>/.claude/skills/<skill>/.mcp.json.cursor/mcp.json~/.vatio/sessions.json
Network endpoints3
vatio.ai/mcpvatio.ai/api/developer/v1/cli/eventsVATIO_BASE_URL may override the base host
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes bin/install.mjs as a command; it has no lifecycle script, so its setup runs when a user invokes the CLI.
- The CLI describes copying the package's skills into project agent skill directories.
- The installer adds the Vatio MCP server to project configuration, with --no-mcp to skip that step.
- Install telemetry is disclosed, can be disabled, and reports to the Vatio service; the README says it reports the skills version and coding agent.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
8 flaggedbin/install.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { spawnsync } from "node:child_process";
import { randomuuid } from "node:crypto"
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/install.mjsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { spawnsync } from "node:child_process";
import { randomuuid } from "node:crypto";
import { cpsync, existssync, mkdirsync, readfilesync, readdirsync, rmsync, writefilesync } from "node:fs";
import { homedir, platform } from "node:os";
import { basename, dirname, join, relative, resolve } from "node:path";
import { fileurltopath } from "node:url";
const usage = `usage: npx @vatio-ai/skills [--dir path] [--no-mcp]
copies the vatio skills (vatio-init, vatio-improve, vatio-analyze,
vatio-share-session) into path/.agents/skills and path/.claude/skills,
and adds the vatio mcp (https://vatio.ai/mcp) to path/.mcp.json and,
when there is a path/.cursor, path/.cursor/mcp.json. --
Findings
2 High2 Medium8 Low
HighExternal Ai Agent Control Surface Mutationbin/install.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review Evidencebin/install.mjs
LowAi Review EvidenceREADME.md
Affected versions and remediation
This report applies to @vatio-ai/skills@2.1.0.
See all versions of @vatio-ai/skills for other recorded verdicts.
- Review the evidence and your use of @vatio-ai/skills@2.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.