Loading npm security reports…

@vanillagreen/pi-task-panel@3.0.0: AI-agent control-surface risk | LPM Firewall

registry / @vanillagreen/pi-task-panel / 3.0.0

@vanillagreen/pi-task-panel@3.0.0

Persistent Claude-style tasks panel for Pi with slash commands and a structured tasks_write tool.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. An automatic npm postinstall modifies Pi's shared agent instructions. Ordinary installs can reach the existing user-wide Pi directory without explicit setup consent.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation when a managed scope or existing Pi user directory is available.

Impact

Package instructions persist in a broad agent control surface and influence subsequent agent work.

Mechanism

The lifecycle helper reads instructions.md and inserts its contents into APPEND_SYSTEM.md.

Policy narrative

Installing the package automatically invokes an instruction-writing helper. Outside managed installation paths, the helper selects the configured Pi directory or the existing user-wide Pi directory. It then inserts packaged task workflow instructions into the shared APPEND_SYSTEM.md. Package markers and directory-existence checks limit the write but do not obtain consent to modify that broad agent control surface.

AI rationale

Source establishes an unconsented postinstall write to a shared AI-agent instruction file, including a user-wide fallback. This meets the blocking control-surface policy despite the task-related content and bounded insertion.

Evidence

package.jsonscripts/append-system.mjsinstructions.mdAPPEND_SYSTEM.md

Decision evidence

public snapshot

with false-positive risk.

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/append-system.mjs install

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

19"scripts": { "postinstall": "node scripts/append-system.mjs install", "preuninstall": "node scripts/append-system.mjs remove" }, "kendex":

High

Suspicious Lifecycle Evidence

package.json automatically runs the instruction installer during postinstall.

package.jsonView on unpkg · L19

•scripts.postinstall = node scripts/append-system.mjs install

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/append-system.mjsView file

100const configured = process.env.PI_CODING_AGENT_DIR; const piDir = configured ? resolve(configured.replace(/^~(?=\/|$)/, homedir())) : join(homedir(), ".pi", "agent"); return existsSync(piDir) ? piDir : undefined; } function isPiScopeRoot(scope

High

Ai Review Evidence

scripts/append-system.mjs falls back to the existing user-wide Pi directory without an opt-in check.

scripts/append-system.mjsView on unpkg · L100

59const target = join(scopeRoot, "APPEND_SYSTEM.md"); const begin = ``; const end = ``; try

High

Ai Review Evidence

The installer reads packaged instructions and writes them into the shared APPEND_SYSTEM.md with package markers.

scripts/append-system.mjsView on unpkg · L59

130function upsertBlock(target, begin, end, content) { mkdirSync(dirname(target), { recursive: true }); const stripped = strippedExisting(target, begin, end); const block = `${begin}\n${content}\n${end}`; const next = stripped ? `${stripped}\n\n${block}\n` : `${block}\n`; writeFileSync(target, next); } function remov

High

Ai Review Evidence

The installer reads packaged instructions and writes them into the shared APPEND_SYSTEM.md with package markers.

scripts/append-system.mjsView on unpkg · L130

70const content = readFileSync(sourcePath, "utf8").trim(); if (!content) { console.error(`append-system.mjs: appendSystem source is empty for ${name}: ${sourcePath}`); process.exit(0); } upsertBlock(target, begin, end, content); } else { removeBlock(tar

Source & flagged code

7 flagged

package.jsonView file

Lines 1-40json

1{

2 "name": "@vanillagreen/pi-task-panel",

3 "version": "3.0.0",

4 "description": "Persistent Claude-style tasks panel for Pi with slash commands and a structured tasks_write tool.",

5 "license": "MIT",

6 "keywords": [

7 "pi-package",

8 "pi",

9 "coding-agent",

10 "tasks"

11 ],

12 "pi": {

13 "extensions": [

14 "./extensions/task-panel.ts"

15 ],

16 "image": "https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-task-panel/assets/panel-expanded.png",

17 "appendSystem": "./instructions.md"

18 },

19 "scripts": {

20 "postinstall": "node scripts/append-system.mjs install",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L20

21 "preuninstall": "node scripts/append-system.mjs remove"

22 },

23 "kendex": {

High

Suspicious Lifecycle Evidence

package.json automatically runs the instruction installer during postinstall.

package.jsonView on unpkg · L19

24 "extensionManager": {

25 "displayName": "Task Panel",

26 "settings": [

27 {

28 "key": "enabled",

29 "label": "Enable task panel",

30 "description": "Register tasks_write, /tasks, task panel widgets, reminders, and shortcuts.",

31 "type": "boolean",

32 "default": true,

33 "category": "General",

34 "apply": "reload",

35 "requiresReload": true

36 },

37 {

38 "key": "glyphStyle",

39 "label": "Glyph style",

40 "description": "Glyphs for kendex-owned UI chrome. Unicode is the default; ASCII uses plain box/status/separator characters for terminal compatibility. pi-tool-renderer's global override wins when set.",

scripts/append-system.mjsView file

Lines 39-150javascript

39try {

40 pkg = JSON.parse(readFileSync(join(pkgDir, "package.json"), "utf8"));

41} catch (err) {

42 console.error(`append-system.mjs: unable to read package.json in ${