registry  /  pi-maestro-teammate  /  0.4.1

pi-maestro-teammate@0.4.1

Pi extension — teammate agent dispatch with DAG task graphs, RPC messaging, and compact TUI

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. A registered Pi extension can dispatch Pi subprocesses when a user invokes its teammate tools. No confirmed covert network, credential, or install-time attack surface was found.

Static reason
No blocking static signals were detected.
Trigger
User loads the Pi extension and invokes a teammate dispatch tool.
Impact
Delegated agents may receive Pi tools configured by their role, including shell and filesystem tools.
Mechanism
User-invoked local Pi subprocess orchestration with IPC and temporary files.
Rationale
Source inspection found a user-invoked Pi agent orchestration extension with subprocess and local-tool capability, but no concrete malicious behavior. Treat the extension lifecycle and delegated shell/file capability as a warn-level platform risk.
Evidence
package.jsonsrc/extension/index.tssrc/runs/execution.tssrc/agents/agents.tssrc/extension/structured-output.tsagents/delegate.mdagents/coordinator.md

Decision evidence

public snapshot
AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
  • `package.json` registers `./src/extension/index.ts` as a Pi extension.
  • `src/runs/execution.ts` spawns the `pi` CLI to run teammate agents.
  • Bundled roles request filesystem and shell tools in `agents/*.md`.
Evidence against
  • `package.json` has no preinstall, install, or postinstall hook.
  • No network client or non-documentation endpoint appears in source.
  • No credential harvesting, exfiltration, eval, or remote payload loading found.
  • Writes are limited to temporary prompts/schemas/results and child session directories.
  • Agent spawning occurs through registered runtime tools, not package installation/import side effects.
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemShell
Supply chain
HighEntropyStrings
Manifest
NoLicense
scanned 12 file(s), 204 KB of source

Source & flagged code

2 flagged · loading source
package.jsonView file
•Published source reference
Medium
Ai Review Evidence

`package.json` registers `./src/extension/index.ts` as a Pi extension.

package.jsonView on unpkg
src/runs/execution.tsView file
•Published source reference
Medium
Ai Review Evidence

`src/runs/execution.ts` spawns the `pi` CLI to run teammate agents.

src/runs/execution.tsView on unpkg

Findings

4 Medium4 Low
MediumEnvironment Vars
MediumAi Review Evidencepackage.json
MediumAi Review Evidencesrc/runs/execution.ts
MediumAi Review Evidence
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License