registry / @firstpick/pi-package-natural-conversation / 0.1.2

@firstpick/pi-package-natural-conversation@0.1.2

Safe per-process Natural Conversation Mode for Pi, with /talk commands and read-only tool constraints.

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. A Pi extension can alter its host conversation tool policy and, after explicit setup, capture microphone audio and invoke configured STT/TTS providers. No unconsented install-time behavior or concrete malicious chain was found.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Pi loads the declared extension; audio/config changes require /talk commands and setup consent.

Impact

Can write its package-owned Pi voice config, spawn configured local audio executables, and send audio/text to explicitly approved providers.

Mechanism

First-party Pi extension with user-invoked voice configuration and native-process orchestration.

Rationale

No malicious install-time, stealth, credential-exfiltration, or remote-payload behavior was found. Warn because this package is an agent extension that can configure host-adjacent state and start native audio processes after user interaction.

Evidence

package.jsonextensions/natural-conversation.tslib/setup-wizard.mjslib/voice-config.mjslib/native-audio-loop.mjslib/providers/select.mjs~/.pi/agent/voice.json$XDG_RUNTIME_DIR/pi-voice$XDG_DATA_HOME/piper$XDG_DATA_HOME/whisper

Network endpoints5

/rhasspy/piper-voices/resolve/main

@firstpick/pi-package-natural-conversation@0.1.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code