registry / @vanillagreen/pi-session-bridge / 3.0.0

@vanillagreen/pi-session-bridge@3.0.0

Pi extension and CLI for controlling visible interactive Pi sessions over a structured Unix-socket side channel.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. An automatic npm postinstall modifies Pi’s shared agent instructions. The fallback reaches an existing user-wide agent directory rather than a package-owned configuration file.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation with lifecycle scripts enabled and a resolvable Pi scope or existing Pi user directory.

Impact

Package instructions influence subsequent agent behavior, including how it controls other interactive sessions.

Mechanism

The lifecycle helper reads instructions.md and writes a marked block into APPEND_SYSTEM.md without a separate user-command setup or consent gate.

Policy narrative

Installing the package automatically invokes its instruction installer. The helper resolves a Pi scope and falls back to the existing user-wide Pi directory for ordinary installations. It then inserts package-authored instructions into the shared APPEND_SYSTEM.md file. Those instructions direct agent behavior beyond the package’s own configuration. Package-specific markers and an existing-directory check limit the write but do not provide consent for modifying this broad agent control surface.

AI rationale

Source establishes unconsented postinstall mutation of a broad AI-agent instruction surface. This meets the supplied blocking policy even without evidence of credential theft or remote payload execution.

Evidence

package.jsonscripts/append-system.mjsinstructions.mdAPPEND_SYSTEM.md

@vanillagreen/pi-session-bridge@3.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code