registry / pi-extensions / 0.1.56

pi-extensions@0.1.56

Personal extensions for the [Pi coding agent](https://github.com/badlogic/pi-mono).

AI Security Review

scanned 7h ago · by lpm-firewall-ai

The files widget can execute shell commands through a crafted repository filename. No package-controlled network endpoint or install-time payload was found.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User opens a crafted file in the files widget, particularly with diff mode or external renderers available.

Impact

Arbitrary command execution with the Pi user's permissions.

Mechanism

Unsafely interpolated file path in `execSync` shell commands.

Rationale

The package is not shown to perform malicious installation, persistence, exfiltration, or network behavior. However, the confirmed unescaped file-path interpolation is a concrete local arbitrary-command-execution vulnerability and warrants a warning.

Evidence

package.jsonfiles-widget/package.jsonfiles-widget/file-tree.tsfiles-widget/viewer.tsfiles-widget/file-viewer.tsusage-extension/data.ts

Decision evidence

public snapshot

AI called this Suspicious at 96.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

`files-widget/file-viewer.ts` interpolates `filePath` into shell strings passed to `execSync`.

pi-extensions@0.1.56

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code