registry / @pi-vault/pi-tools / 0.2.0

@pi-vault/pi-tools@0.2.0

Pi extension for quick access to code search, web fetch, and web search tools

AI Security Review

scanned 19h ago · by lpm-firewall-ai

A repository-controlled .pi/tools.json can supply an apiKey beginning with !. On extension startup, that value is executed by the local shell before any tool call.

Static reason

No blocking static signals were detected.

Trigger

Opening/starting Pi in a project containing .pi/tools.json while the extension is enabled.

Impact

Arbitrary local command execution with the Pi user's privileges.

Mechanism

Unvalidated project configuration reaches execSync as a shell command.

Rationale

No evidence shows package-authored malware or install-time mutation, but the documented shell-command API-key feature combined with automatically loaded project configuration is a concrete arbitrary-command-execution vulnerability.

Evidence

src/config.tssrc/index.tsREADME.mdpackage.json.pi/tools.json

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

src/config.ts loads project .pi/tools.json during extension startup.
src/config.ts treats apiKey values prefixed ! as shell commands via execSync.

@pi-vault/pi-tools@0.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code