registry / pi-loop-police / 1.10.1

pi-loop-police@1.10.1

Pi extension: detects and interrupts infinite thinking-block and tool-call loops in real time before they exhaust your context window.

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 107 KB of source, external domains: ntfy.sh

Source & flagged code

5 flagged

examples/hook.mjsView file

Lines 1-38javascript

1#!/usr/bin/env node

2// Example HOOK_CMD hook: desktop notification when a loop is detected.

3// Zero dependencies — no npm packages, no external services. Uses whatever

4// the OS already ships: a Windows toast (PowerShell/WinRT), macOS

5// `osascript`, or Linux `notify-send`. Copy it anywhere and point HOOK_CMD

High

Shell

Package source references shell execution.

examples/hook.mjsView on unpkg · L3

6// at it:

7//

8// /loop-police set HOOK_CMD=node /path/to/hook.mjs

9//

10// The detection payload arrives as the LAST argv element (JSON, schema in the

11// README). Exit code and output are ignored by loop-police, so a hook can

12// never break detection — but a non-zero exit shows a one-time warning, which

13// is useful while developing one.

14//

15// Optional: to ALSO push to a phone via https://ntfy.sh, subscribe to a topic

16// at https://ntfy.sh/<topic> (or the mobile app) and set:

17// export LOOP_POLICE_NTFY_TOPIC=my-secret-topic

19import { spawnSync } from "node:child_process";

High

Child Process

Package source references child process execution.

examples/hook.mjsView on unpkg · L18

21const payload = JSON.parse(process.argv.at(-1));

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

examples/hook.mjsView on unpkg · L3

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

examples/hook.mjsView on unpkg · L3

23const title = "loop-police";

24const body =

25 `${payload.model?.id ?? "unknown model"} hit ${payload.event} ` +

26 `(turn ${payload.turnIndex}, ${payload.consecutiveLoops} consecutive) in ${payload.cwd}`;

28// --- local desktop notification (default, fully offline) ---

30// Text travels via env vars so no shell escaping is ever needed.

31const env = { ...process.env, LP_TITLE: title, LP_BODY: body };

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

examples/hook.mjsView on unpkg · L15

33const WIN_TOAST = `

34$null = [Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime]

35$xml = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent([Windows.UI.Notifications.ToastTemplateType]::ToastText02)

36$texts = $xml.GetElementsByTagName("text")

37$null = $texts.Item(0).AppendChild($xml.CreateTextNode($env:LP_TITLE))

38$null = $texts.Item(1).AppendChild($xml.CreateTextNode($env:LP_BODY))

Source & flagged code

5 flagged · loading source

examples/hook.mjsView file

18L19: import { spawnSync } from "node:child_process"; L20:

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code