registry / @vanillagreen/pi-web-tools / 3.0.1

@vanillagreen/pi-web-tools@3.0.1

First-party Pi web tools: provider-toggled web search, Exa deep research, content retrieval, and OpenAI native web_search integration.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Automatic installation modifies Pi's shared system instructions. The fallback reaches an existing user-wide agent directory outside the package's own installation scope.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall when a Pi scope or existing fallback agent directory is found.

Impact

Subsequent agent sessions receive package-supplied tool-selection directives through a shared control surface.

Mechanism

The lifecycle helper reads package instructions and inserts them into APPEND_SYSTEM.md without a separate opt-in check.

Policy narrative

Installing the package automatically runs its instruction helper. Even outside a managed extension installation, the helper can locate the existing user-wide Pi directory and append package instructions to its shared system prompt. Package markers limit replacement to its own block, but do not prevent the unconsented modification of the broader agent control surface.

AI rationale

The user-wide fallback makes this an automatic mutation of a broad AI-agent control surface, rather than setup confined to package-owned extension state. This meets the supplied blocking rule despite the tool-related content and bounded block replacement.

Evidence

package.jsonscripts/append-system.mjsinstructions.mdAPPEND_SYSTEM.md

Decision evidence

public snapshot

@vanillagreen/pi-web-tools@3.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code