registry / pi-maestro-flow / 0.4.4

pi-maestro-flow@0.4.4

Pi extension for Maestro knowledge and workflow orchestration with teammate dispatch

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 31 file(s), 320 KB of source, external domains: api.anthropic.com, api.openai.com, generativelanguage.googleapis.com

Source & flagged code

3 flagged

package.jsonView file

Lines 1-27json

2 "name": "pi-maestro-flow",

3 "version": "0.4.4",

4 "description": "Pi extension for Maestro knowledge and workflow orchestration with teammate dispatch",

5 "type": "module",

6 "scripts": {

7 "postinstall": "node scripts/configure-keybindings.mjs && node scripts/install-workflows.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L7

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L7

8 "test:install": "node --test test/configure-keybindings.test.mjs test/install-workflows.test.mjs",

9 "test:package": "node --experimental-transform-types --test test/package-resources.test.mjs test/package-resources-runtime.test.ts",

10 "test:todo": "node --experimental-transform-types --test test/skill-loader.test.ts test/todo.test.ts",

11 "test:compaction": "node --experimental-transform-types --test test/compaction.test.ts",

12 "test:hooks": "node --experimental-transform-types --test test/hooks.test.ts",

13 "test:goal": "node --experimental-transform-types --test test/goal.test.ts",

14 "test:plan": "node --experimental-transform-types --test test/plan-store.test.ts test/plan-editor.test.ts test/plan-lifecycle.test.ts test/statusline.test.ts"

15 },

16 "keywords": [

17 "pi-package",

18 "pi",

19 "pi-coding-agent",

20 "maestro",

21 "agents",

22 "explore",

23 "delegate",

24 "moa",

25 "workflow",

26 "orchestration",

27 "skills"

src/compaction/pi-internals.tsView file

Lines 1-29typescript

1import { dirname, join } from "node:path";

2import { fileURLToPath, pathToFileURL } from "node:url";

4export interface PiCompactionInternals {

5 prepareCompaction(entries

Source & flagged code

3 flagged · loading source

package.jsonView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code