registry / pi-guard / 1.4.0

pi-guard@1.4.0

General-purpose permission system for pi tools, handling permissions for bash and file tools with extensible matchers for custom tools.

AI Security Review

scanned 18h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User invokes /guard enable, disable, or toggle in Pi.

Impact

Can change Pi Guard permission enforcement, including disabling it.

Mechanism

Explicit command updates the extension-owned guard settings.

Rationale

The package has an explicit-user-command AI-agent configuration mutation, which warrants a warning under policy. Source otherwise implements local permission prompts and contains no concrete malicious behavior.

Evidence

package.jsonsrc/index.tssrc/commands.tssrc/config.tssrc/defaults.tssrc/handlers.ts~/.pi/agent/settings.json.pi/settings.json

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

src/config.ts writes ~/.pi/agent/settings.json under the guard key.

pi-guard@1.4.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code