registry / gentle-pi / 1.0.4

gentle-pi@1.0.4

Turn Pi into el Gentleman: a senior-architect development harness with SDD/OpenSpec, subagents, strict TDD evidence, review guardrails, and skill discovery.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 101 file(s), 1.71 MB of source, external domains: example.invalid, github.com, malformed.example

Source & flagged code

4 flagged

package.jsonView file

Lines 48-72json

48 "skills": [

49 "./skills"

50 ]

51 },

52 "dependencies": {

53 "@earendil-works/pi-tui": "*",

54 "@heyhuynhgiabuu/pi-pretty": "0.6.14"

55 },

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-gentle-ai.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

tests/review-bundle.test.tsView file

54const importer = new ReviewBundleImporter(target, { mutationLockPlatform: qualifiedReviewLockPlatform() }); L55: const imported = importer.import({ inputPath: first, operationId: "import-one", [redacted]: true }); L56: assert.equal(imported.imported, true);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

tests/review-bundle.test.tsView on unpkg · L54

extensions/skill-registry.tsView file

54function userSkillDirs(): string[] { L55: const home = homedir(); L56: return [ ... L127: L128: function parseFrontmatter(source: string): { name?: string; description?: string; body: string } { L129: const normalized = source.replace(/\r\n?/g, "\n"); ... L384: try { L385: const parsed: unknown = JSON.parse(await readFile(cachePath, "utf8")); L386: cached = isCacheFile(parsed) ? parsed.fingerprint : undefined; ... L427: argv = process.argv.slice(2), L428: env = process.env, L429: ): boolean {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

extensions/skill-registry.tsView on unpkg · L54

extensions/gentle-ai.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = gentle-pi@1.0.1 matchedIdentity = npm:Z2VudGxlLXBp:1.0.1 similarity = 0.679 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

extensions/gentle-ai.tsView on unpkg

Findings

2 High5 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighPrevious Version Dangerous Deltaextensions/gentle-ai.ts

MediumDynamic Requiretests/review-bundle.test.ts

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowWeak Cryptoextensions/skill-registry.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

tests/review-bundle.test.tsView file

Lines 34-74typescript

34 lineageId,

35 mode: REVIEW_MODE.ORDINARY,

36 snapshot: testSnapshot({ baseTree: "1".repeat(40), completeTree: "2".repeat(40), route: REVIEW_ROUTE.STANDARD, lenses: [REVIEW_LENS.RELIABILITY] }),

37 evidenceHash: "a".repeat(64),

38 budget: { review_batches: 1, review_actors: 1, refuter_batches: 1, fix_batches: 1, validator_runs: 1, final_verifications: 1, judgment_rounds: 0, judge_runs: 0 },

39 }), "start");

40 store.runReducerOperation({ lineageId, transition: "ordinary-discovery", idempotencyKey: "freeze", input: { rows: [] } });

41}

43test("bundle export is deterministic and compatible import installs its exact graph closure atomically", (t) => {

44 const { parent, source, target } = repository(t);

45 createLineage(source);

46 const first = join(parent, "first.review-bundle");

47 const second = join(parent, "second.review-bundle");

48 const exporter = new ReviewBundleExporter(source);

49 const exported = exporter.export({ outputPath: first, operationId: "export-one" });

50 exporter.export({ outputPath: second, operationId: "export-two" });

51 assert.deepEqual(readFileSync(first), readFileSync(second));

52 assert.equal(exported.roots[0]?.lineage_id, "bundle-lineage");

54 const importer = new ReviewBundleImporter(target, { mutationLockPlatform: qualifiedReviewLockPlatform() });

55 const imported = importer.import({ inputPath: first, operationId: "import-one", acknowledgeUntrustedBundleSource: true });

56 assert.equal(imported.imported, true);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

tests/review-bundle.test.tsView on unpkg · L54

57 assert.equal(ReviewTransactionStore.forRepository(target).read("bundle-lineage").lineage_id, "bundle-lineage");

58 assert.equal(importer.import({ inputPath: first, operationId: "import-two" }).imported, false);

59});

61// RISK2-001 (openspec/changes/bounded-review-graph-parity/reviews/post-apply-4r-round2-ledger.md):

62// repository_identity/root_commit_ids match alone cannot prove a bundle's lineage content was

63// ever produced by a legitimate export from THIS repository's own history — anyone who knows the

64// (often public) root commit can forge a structurally valid bundle claiming the same identity.

65// These tests exercise the resulting trust gate.

66test("bundle import denies adopting a brand-new lineage without an explicit untrusted-source acknowledgement", (t) => {

67 const { parent, source, target } = repository(t);

68 createLineage(source);

69 const bundle = join(parent, "transfer.review-bundle");

70 new ReviewBundleExporter(source).export({ outputPath: bundle, operationId: "export" });

71 assert.throws(

72 () => new ReviewBundleImporter(target, { mutationLockPlatform: qualifiedReviewLockPlatform() }).import({ inputPath: bundle, operationId: "no-acknowledgement" }),

73 /REVIEW_BUNDLE_UNTRUSTED_SOURCE/,

74 );

extensions/skill-registry.tsView file

Lines 34-74typescript

34interface SkillRegistryExtensionGlobal {

35 [SKILL_REGISTRY_EXTENSION_SOURCE_KEY]?: string;

36}

38async function pathExists(path: string): Promise<boolean> {

39 try {

40 await access(path);

41 return true;

42 } catch {

43 return false;

44 }

45}

47interface SkillEntry {

48 name: string;

49 path: string;

50 description: string;

51 scope?: string;

52}

54function userSkillDirs(): string[] {

55 const home = homedir();

56 return [

Low

Weak Crypto

Package source references weak cryptographic algorithms.

extensions/skill-registry.tsView on unpkg · L54

57 join(home, ".pi/agent/skills"),

58 join(home, ".config/agents/skills"),

59 join(home, ".agents/skills"),

60 join(home, ".kimi/skills"),

61 join(home, ".config/opencode/skills"),

62 join(home, ".config/kilo/skills"),

63 join(home, ".claude/skills"),

64 join(home, ".gemini/skills"),

65 join(home, ".gemini/antigravity/skills"),

66 join(home, ".trae/skills"),

67 join(home, ".cursor/skills"),

68 join(home, ".copilot/skills"),

69 join(home, ".codex/skills"),

70 join(home, ".codeium/windsurf/skills"),

71 join(home, ".qwen/skills"),

72 join(home, ".kiro/skills"),

73 join(home, ".openclaw/skills"),

74 ];