registry / @plannotator/pi-extension / 0.21.3

@plannotator/pi-extension@0.21.3

Plannotator Pi extension - interactive plan review with annotations, annotate agent messages, and review code/PRs

AI Security Review

scanned 19h ago · by lpm-firewall-ai

In remote/SSH sessions, the review server listens on 0.0.0.0 without authentication. Its HTTP API can launch configured AI-agent review jobs and alter review-related state.

Static reason

No blocking static signals were detected.

Trigger

Starting a review server in a remote session, then reaching its exposed port.

Impact

A network-reachable peer may trigger local AI CLI activity and review-state mutations.

Mechanism

Unauthenticated remote HTTP control of agent-job endpoints

Rationale

Source inspection found no lifecycle execution, credential harvesting, or covert exfiltration. The unauthenticated 0.0.0.0 server combined with agent-launch endpoints is a material remote control risk.

Evidence

package.jsonserver/network.tsserver/serverReview.tsserver/agent-jobs.tsgenerated/review-skill-loader.ts

Network endpoints3

0.0.0.0127.0.0.1r.jina.ai/

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Critical Vulnerability with false-positive risk.

@plannotator/pi-extension@0.21.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code