Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
A Pi agent invokes executePython with code or packages.
Impact
Arbitrary code may act with the host agent session's permissions, including effects inherent to user-requested Python dependencies.
Mechanism
Persistent uv-launched Python subprocess executing caller-supplied code
Rationale
This is a dangerous dual-use AI-agent execution capability rather than concrete malware. A warning preserves visibility of the capability without claiming malicious intent.
Evidence
package.jsonextensions/execute-python.tskernel.tsrunner.py