Loading npm security reports…

@vanillagreen/pi-task-panel@3.0.3: AI-agent control-surface risk | LPM Firewall

registry / @vanillagreen/pi-task-panel / 3.0.3

@vanillagreen/pi-task-panel@3.0.3

Persistent Claude-style tasks panel for Pi with slash commands and a structured tasks_write tool.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Automatic installation modifies Pi's shared agent instructions outside the package. The fallback reaches an existing user agent directory without requiring explicit setup or consent.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall when a managed scope is found or the Pi user agent directory already exists.

Impact

Persistent changes to agent tool use and reply behavior across the affected Pi scope.

Mechanism

The lifecycle helper reads package instructions and writes them into APPEND_SYSTEM.md under package markers.

Policy narrative

Installing the package automatically runs an instruction-writing helper. It locates a managed scope or falls back to the existing Pi user agent directory, then adds task workflow directives to shared APPEND_SYSTEM.md. The fallback does not require explicit user-command setup or consent. Package markers and an uninstall removal path limit the intended edit but do not prevent the install-time change to a foreign agent control surface.

AI rationale

Source establishes unconsented postinstall mutation of a shared Pi agent instruction file, including a user-directory fallback. This meets the blocking rule for foreign or broad AI-agent control-surface writes despite the task-related content and removal path.

Evidence

package.jsonscripts/append-system.mjsinstructions.mdAPPEND_SYSTEM.md

Decision evidence

public snapshot

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/append-system.mjs install

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

19"scripts": { "test": "bun test ./tests", "postinstall": "node scripts/append-system.mjs install", "preuninstall": "node scripts/append-system.mjs remove" }, "kendex": {

High

Ai Review Evidence

package.json automatically runs the instruction installer after npm installation.

package.jsonView on unpkg · L19

•scripts.postinstall = node scripts/append-system.mjs install

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/append-system.mjsView file

113const configured = process.env.PI_CODING_AGENT_DIR; const piDir = configured ? resolve(configured.replace(/^~(?=\/|$)/, homedir())) : join(homedir(), ".pi", "agent"); return existsSync(piDir) ? piDir : undefined; } function isPiScopeRoot(scopeRoot) { if (exists

High

Ai Review Evidence

The installer falls back to the existing Pi user agent directory without a consent check.

scripts/append-system.mjsView on unpkg · L113

66const target = join(scopeRoot, "APPEND_SYSTEM.md"); const begin = ``; const end = `<!-- kendex:append-system ${

High

Ai Review Evidence

The installer targets shared APPEND_SYSTEM.md and writes a package instruction block during installation.

scripts/append-system.mjsView on unpkg · L66

143function upsertBlock(target, begin, end, content) { mkdirSync(dirname(target), { recursive: true }); const stripped = strippedExisting(target, begin, end); const block = `${begin}\n${content}\n${end}`; const next = stripped ? `${stripped}\n\n${block}\n` : `${block}\n`; writeFileSync(target, next); } fun

High

Ai Review Evidence

The installer targets shared APPEND_SYSTEM.md and writes a package instruction block during installation.

scripts/append-system.mjsView on unpkg · L143

84if (!content) { notice("source-empty", sourcePath, `The appendSystem source for ${name} is empty.`); process.exit(0); } upsertBlock(target, begin, end, content); } else { removeBlock(target, begin, end); } } catch (err) {

Source & flagged code

7 flagged

package.jsonView file

Lines 1-41json

1{

2 "name": "@vanillagreen/pi-task-panel",

3 "version": "3.0.3",

4 "description": "Persistent Claude-style tasks panel for Pi with slash commands and a structured tasks_write tool.",

5 "license": "MIT",

6 "keywords": [

7 "pi-package",

8 "pi",

9 "coding-agent",

10 "tasks"

11 ],

12 "pi": {

13 "extensions": [

14 "./extensions/task-panel.ts"

15 ],

16 "image": "https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-task-panel/assets/panel-expanded.png",

17 "appendSystem": "./instructions.md"

18 },

19 "scripts": {

20 "test": "bun test ./tests",

21 "postinstall": "node scripts/append-system.mjs install",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L21

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L21

22 "preuninstall": "node scripts/append-system.mjs remove"

23 },

24 "kendex": {

High

Ai Review Evidence

package.json automatically runs the instruction installer after npm installation.

package.jsonView on unpkg · L19

25 "extensionManager": {

26 "displayName": "Task Panel",

27 "settings": [

28 {

29 "key": "enabled",

30 "label": "Enable task panel",

31 "description": "Register tasks_write, /tasks, task panel widgets, reminders, and shortcuts.",

32 "type": "boolean",

33 "default": true,

34 "category": "General",

35 "apply": "reload",

36 "requiresReload": true

37 },

38 {

39 "key": "glyphStyle",

40 "label": "Glyph style",

41 "description": "Glyphs for kendex-owned UI chrome. Unicode is the default; ASCII uses plain box/status/separator characters for terminal compatibility. pi-tool-renderer's global override wins when set.",

scripts/append-system.mjsView file

Lines 46-163javascript

46try {

47 pkg = JSON.parse(readFileSync(join(pkgDir, "package.json"), "utf8"));

48} catch (err) {

49 notice("package-read"