registry / pi-google-services / 0.1.22

pi-google-services@0.1.22

Google Calendar & Gmail MCP server for Pi — login once, manage your calendar and emails from your AI agent.

AI Security Review

scanned 8d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Automatic installation modifies Pi's global MCP configuration to register a package-controlled executable. This establishes an unconsented mutation of a foreign AI-agent control surface.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

npm postinstall, when the google-services MCP entry is absent.

Impact

Subsequent Pi MCP use can launch the registered executable with access inherited from the agent environment.

Mechanism

install.js installs the executable and writes a server registration into the user's Pi agent configuration without requesting consent.

Policy narrative

Installing the package automatically invokes install.js. The installer places its executable in the user's local binary directory and adds a server command to Pi's global MCP configuration when that entry is absent. No explicit setup command or consent gate precedes this configuration write. The foreign agent configuration mutation independently meets the supplied blocking policy; executable internals and credential theft are not needed to establish that behavior.

AI rationale

Inspected source proves an automatic, unconsented postinstall write to Pi's global agent control surface. Under the supplied policy, this warrants blocking despite guards that preserve existing entries and invalid configuration files.

Evidence

package.jsoninstall.js.pi/agent/mcp.json.local/bin/pi-google-services

pi-google-services@0.1.22

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code