pi-compound-engineering@3.19.2

One or more suspicious static signals were detected.

Load the Pi extension and start a session with a missing peer package; npm install activates lifecycle hooks.

Can alter project AI-agent instructions without a separate user command and make a package-aligned telemetry request; no confirmed exfiltration or remote-code chain beyond the pinned archive was found.

guarded agent-control-surface write, telemetry, and hash-pinned skill staging

This is a guarded extension lifecycle/control-surface risk rather than a confirmed malicious chain. Automatic project `AGENTS.md` mutation and default telemetry justify warning, while hash verification and absence of credential theft, destructive behavior, or unpinned payload execution argue against blocking.