registry / @blksails/pi-web-tool-kit / 0.2.0

@blksails/pi-web-tool-kit@0.2.0

pi-web 通用工具套件:声明式工具引擎 + 首批 AIGC 生成工具集。主入口零运行时依赖(声明,前端安全);./runtime 子入口为 node-only 执行层(pi SDK + undici)。

AI Security Review

scanned 16h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time execution or confirmed malicious behavior was found. A guarded, forced agent extension can install or remove pi extensions only when an administrator enables mutation.

Static reason

No blocking static signals were detected.

Trigger

An agent invokes install_extension or uninstall_extension after PI_WEB_EXT_ADMIN_ALLOW_ANY=1 is supplied.

Impact

Enabled deployments permit agent-mediated extension changes; installed extensions may introduce their own code.

Mechanism

Guarded pi CLI extension lifecycle management

Rationale

The package is not malicious by source inspection, but it provides guarded agent-controlled extension lifecycle operations. This is a real platform-extension risk rather than unconsented install-time control-surface mutation.

Evidence

package.jsonsrc/extension-tools/extension-manager.tssrc/extension-tools/gate.tssrc/engine/endpoint-adapter.tssrc/aigc/model-config.ts

Network endpoints5

openrouter.ai/api/v1/chat/completionsopenrouter.ai/api/v1/imagesdashscope.aliyuncs.com/api/v1openai.sufy.com/v1www.apiservices.top/v1

@blksails/pi-web-tool-kit@0.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code