Loading npm security reports…

pi-google-services@0.1.19: AI-agent control-surface risk | LPM Firewall

registry / pi-google-services / 0.1.19

pi-google-services@0.1.19

Google Calendar & Gmail MCP server for Pi — login once, manage your calendar and emails from your AI agent.

AI Security Review

scanned 19d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm installation silently modifies Pi's MCP configuration and registers a package-provided executable as an agent server. A later Pi session can invoke that executable through the added MCP command.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall

Impact

A package installation gains persistent execution through the user's Pi agent configuration without an explicit setup command.

Mechanism

automatic MCP configuration injection and binary deployment

Policy narrative

Installing the package runs install.js automatically. The script decompresses a bundled executable into the user's local bin directory, then modifies ~/.pi/agent/mcp.json to register that executable as the google-services MCP server. This is an unconsented install-time mutation of a shared AI-agent control surface, enabling the package binary to run when Pi starts or uses that server.

AI rationale

The automatic postinstall deploys an opaque bundled binary and injects it into Pi's shared MCP configuration. This meets the policy threshold for unconsented install-time mutation of a foreign AI-agent control surface.

Evidence

package.jsoninstall.jsbin/pi-google-services-linux-amd64.gz~/.local/bin/pi-google-services~/.pi/agent/mcp.json~/.config/pi-google-services/credentials.json

Decision evidence

Source & flagged code

6 flagged

package.jsonView file

Lines 10-45json

10 "repository": {

11 "type": "git",

12 "url": "git+https://github.com/lucasvidela94/pi-google-services.git"

13 },

14 "bugs": {

15 "url": "https://github.com/lucasvidela94/pi-google-services/issues"

16 },

17 "homepage": "https://github.com/lucasvidela94/pi-google-services",

18 "bin": {

19 "pi-google-services": "./bin/pi-google-services"

20 },

21 "pi": {

22 "skills": [

23 "./SKILL.md"

24 ],

25 "extensions": [

26 "./extensions"

27 ]

28 },

29 "scripts": {

30 "postinstall": "node install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L30

31 "preuninstall": "node uninstall.js"

32 },

33 "engines": {

34 "node": ">=18"

35 },

36 "os": [

37 "darwin",

38 "linux"

39 ],

40 "cpu": [

41 "x64",

42 "arm64"

43 ]

44}

45

credentials.jsonView file

Lines 1-2json

1{"installed":{"client_id":"362212565541-bouhjqpevlpn8r61m6hgnocvt0bqni9l.apps.googleusercontent.com","project_id":"pi-servicios-101","auth_uri":"https://accounts.google.com/o/oauth2/auth","token_uri":"https://oauth2.googleapis.com/token","auth_provider_x509_cert_url":"https://www.googleapis.com/oauth2/v1/certs","client_secret":"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"

install.jsView file

Lines 103-143javascript

103 let compressed;

104 if (fs.existsSync(localSrc)) {

105 console.log(` ✓ Using bundled binary ${assetName}`);

106 compressed = fs.readFileSync(localSrc);

107 } else

bin/pi-google-services-linux-amd64.gzView file

•path = bin/pi-google-services-linux-amd64.gz kind = high_entropy_blob sizeBytes = 6416271 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

bin/pi-google-services-linux-amd64.gzView on unpkg

•path = bin/pi-google-services-linux-amd64.gz kind = compressed_blob sizeBytes = 6416271 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

bin/pi-google-services-linux-amd64.gzView on unpkg