registry / @yassimba/pi-subagents / 0.35.1

@yassimba/pi-subagents@0.35.1

Pi extension for delegating tasks to subagents with chains, parallel execution, and TUI clarification (fork of nicobailon/pi-subagents)

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 123 file(s), 1.79 MB of source, external domains: github.com, shittycodingagent.ai

Source & flagged code

4 flagged

install.mjsView file

Lines 1-30javascript

1#!/usr/bin/env node

3/**

4 * pi-subagents installer

5 *

6 * Usage:

7 * npx pi-subagents # Install to ~/.pi/agent/extensions/subagent

8 * npx pi-subagents --remove # Remove the extension

9 */

11import { execSync } from

Source & flagged code

4 flagged · loading source

install.mjsView file

10L11: import { execSync } from "node:child_process"; L12: import * as fs from "node:fs";

High

Child Process

Package source references child process execution.

install.mjsView on unpkg · L10

6* Usage: L7: * npx pi-subagents # Install to ~/.pi/agent/extensions/subagent L8: * npx pi-subagents --remove # Remove the extension ... L10: L11: import { execSync } from "node:child_process"; L12: import * as fs from "node:fs";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

install.mjsView on unpkg · L6

src/runs/shared/acceptance.tsView file

724env: { ...process.env, ...(command.env ?? {}) }, L725: shell: true, L726: stdio: ["ignore", "pipe", "pipe"],

High

Shell

Package source references shell execution.

src/runs/shared/acceptance.tsView on unpkg · L724

src/runs/background/subagent-runner.tsView file

176structuredOutputSchemaPath?: string; L177: acceptance?: import("../../shared/types.ts").AcceptanceLedger; L178: watchdog?: import("../../shared/types.ts").ChildWatchdogProgress;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/runs/background/subagent-runner.tsView on unpkg · L176

Findings

3 High3 Medium4 Low

HighChild Processinstall.mjs

HighShellsrc/runs/shared/acceptance.ts

HighRuntime Package Installinstall.mjs

MediumDynamic Requiresrc/runs/background/subagent-runner.ts

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

src/runs/shared/acceptance.tsView file

Lines 704-744typescript

704 ...blockers.map((result) => `${result.agent}: ${result.error ?? "child or acceptance gate failed"}`),

705 ]),

706 noStagedFiles: childReports.length > 0 && childReports.every((report) => report.noStagedFiles === true),

707 reviewFindings: uniqueStrings(childReports.flatMap((report) => report.reviewFindings ?? [])),

708 manualNotes: input.notes ?? `Aggregated acceptance evidence from ${input.results.length} dynamic fanout child run(s).`,

709 notes: input.notes,

710 };

711}

712

713function runVerifyCommand(command: AcceptanceVerifyCommand, defaultCwd: string, options: { signal?: AbortSignal; abortMessage?: string } = {}): Promise<AcceptanceVerifyResult> {

714 return new Promise((resolve) => {

715 const startedAt = Date.now();

716 const cwd = command.cwd ? path.resolve(defaultCwd, command.cwd) : defaultCwd;

717 let stdout = "";

718 let stderr = "";

719 let timedOut = false;

720 let settled = false;

721 let hardKill: NodeJS.Timeout | undefined;

722 const child = spawn(command.command, {

723 cwd,

724 env: { ...process.env, ...(command.env ?? {}) },

725 shell: true,

726 stdio: ["ignore", "pipe", "pipe"],

High

Shell

Package source references shell execution.

src/runs/shared/acceptance.tsView on unpkg · L724

727 windowsHide: true,

728 });

729 const finish = (result: Omit<AcceptanceVerifyResult, "id" | "command" | "cwd" | "durationMs">) => {

730 if (settled) return;

731 settled = true;

732 clearTimeout(timeout);

733 if (hardKill) clearTimeout(hardKill);

734 options.signal?.removeEventListener("abort", abortVerification);

735 resolve({

736 id: command.id,

737 command: command.command,

738 cwd,

739 durationMs: Date.now() - startedAt,

740 ...result,

741 });

742 };

743 const abortVerification = () => {

744 if (settled || timedOut) return;

src/runs/background/subagent-runner.tsView file

Lines 156-196typescript

156 interrupted?: boolean;

157 timedOut?: boolean;

158 stopped?: boolean;

159 turnBudget?: TurnBudgetState;

160 turnBudgetExceeded?: boolean;

161 wrapUpRequested?: boolean;

162 toolBudget?: ToolBudgetState;

163 toolBudgetBlocked?: boolean;

164 sessionFile?: string;

165 intercomTarget?: string;

166 model?: string;

167 attemptedModels?: string[];

168 modelAttempts?: ModelAttempt[];

169 totalCost?: CostSummary;

170 artifactPaths?: ArtifactPaths;

171 truncated?: boolean;

172 transcriptPath?: string;

173 transcriptError?: string;

174 structuredOutput?: unknown;

175 structuredOutputPath?: string;

176 structuredOutputSchemaPath?: string;

177 acceptance?: import("../../shared/types.ts").AcceptanceLedger;

178 watchdog?: import("../../shared/types.ts").ChildWatchdogProgress;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/runs/background/subagent-runner.tsView on unpkg · L176

179}

180

181const ASYNC_INTERRUPT_SIGNAL: NodeJS.Signals = process.platform === "win32" ? "SIGBREAK" : "SIGUSR2";

182const DEFAULT_MAX_ASYNC_EVENTS_BYTES = 50 * 1024 * 1024;

183const ASYNC_EVENTS_MAX_BYTES_ENV = "PI_SUBAGENT_ASYNC_EVENTS_MAX_BYTES";

184const TRUNCATED_EVENT_TYPE = "subagent.events.truncated";

185const TRUNCATION_MARKER_RESERVE_BYTES = 512;

186

187interface AsyncEventLogState {

188 bytes: number;

189 diagnosticsTruncated: boolean;

190}

191

192const asyncEventLogStates = new Map<string, AsyncEventLogState>();

193

194function maxAsyncEventsBytes(): number {

195 const raw = process.env[ASYNC_EVENTS_MAX_BYTES_ENV];

196 if (!raw) return DEFAULT_MAX_ASYNC_EVENTS_BYTES;