registry / @nklisch/pi-plugins / 0.1.2

@nklisch/pi-plugins@0.1.2

Native marketplace and plugin lifecycle management for Pi, with Claude Code and Codex compatibility.

AI Security Review

scanned 6h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. A package-declared Pi extension registers a plugin lifecycle manager. At runtime it can execute enabled plugin hook commands and handle explicit lifecycle actions, including integrations for Claude and Codex formats. No unconsented npm install-time mutation or concrete exfiltration chain was found.

Static reason

No blocking static signals were detected.

Trigger

Pi loads the declared extension; users enable/install managed plugins or invoke lifecycle commands.

Impact

Enabled third-party plugin hooks may run commands with a controlled but host-inheriting environment; this is a real agent-extension capability, not confirmed malicious behavior.

Mechanism

Guarded AI-agent extension lifecycle and plugin hook command execution.

Rationale

Source inspection finds a guarded first-party Pi extension lifecycle with subprocess capability, which warrants a warning under the firewall policy. No concrete malicious chain was established.

Evidence

package.jsondist/pi/extension.jsdist/runtime/subagents/pi-subagents-package.jsdist/runtime/hooks/guarded-command-executor.jsdist/infrastructure/process/command-runner.jsdist/application/native-control-lifecycle.jsdist/pi/production-subagents-extension.jsdist/infrastructure/npm/npm-registry-client.js

Network endpoints1

@nklisch/pi-plugins@0.1.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code