registry / @kky42/pievo / 0.3.2

@kky42/pievo@0.3.2

Durable agent evolution harness with a Pi-native chat relay

AI Security Review

scanned 7d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Explicit `pievo` runtime execution starts configured Telegram/Mattermost bots and launches `pi` with a package-owned extension. The extension can use a token-protected local bridge to send replies/attachments and manage schedules for the active session.

Static reason

No blocking static signals were detected.

Trigger

User runs `pievo` after configuring a bot.

Impact

An agent run can act through the configured chat bot and persist its own scheduled tasks; no install-time or foreign agent-control mutation is present.

Mechanism

Package-owned Pi extension brokers agent tool calls to chat and scheduling handlers.

Rationale

No concrete malicious behavior is established, but the package deliberately installs package-owned agent capabilities into each user-invoked `pi` runtime. Per policy, that first-party extension lifecycle risk warrants a warning rather than a block.

Evidence

package.jsonbin/pievo.jssrc/pi_run/runner.jssrc/pi_tools/extension.tssrc/pi_tools/tool-bridge-server.jssrc/chat_adapter/telegram/telegram-api.jssrc/cli.jssrc/pi_run/process-runner.jssrc/config-scaffold.js

Network endpoints1

api.telegram.org

@kky42/pievo@0.3.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code