registry / @vanillagreen/pi-questions / 2.0.2

@vanillagreen/pi-questions@2.0.2

Pi extension for structured multi-tab inline questions and bridge-driven replies.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Automatic installation modifies Pi system instructions for this extension. This creates a platform extension lifecycle risk, but inspected source does not establish a malicious attack.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall adds instructions; preuninstall removes the package block.

Impact

Installing the extension changes model-visible question guidance without a separate setup command.

Mechanism

The helper reads the package instruction file and updates a marked block in the resolved Pi scope’s APPEND_SYSTEM.md.

AI rationale

The source supports a warning for package-owned agent extension setup, rather than a malicious control hijack. Source inspection succeeded, but the citation tool repeatedly failed with a closed transport, so no citation IDs are available.

Evidence

package.jsonscripts/append-system.mjsinstructions.mdAPPEND_SYSTEM.md

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

package.json automatically runs scripts/append-system.mjs on postinstall and preuninstall.

@vanillagreen/pi-questions@2.0.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code