registry / pi-messenger-swarm / 0.25.22

pi-messenger-swarm@0.25.22

Swarm-first multi-agent messaging and task orchestration extension for Pi

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 162 file(s), 882 KB of source, external domains: 127.0.0.1

Source & flagged code

5 flagged

package.jsonView file

Lines 72-94json

72 "pi": {

73 "extensions": [

74 "./dist/index.js"

75 ],

76 "skills": [

77 "./skills"

78 ]

79 },

80 "overrides"

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = simple-git-hooks 2>/dev/null || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = simple-git-hooks 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

swarm/spawn.tsView file

5import { randomUUID } from 'node:crypto'; L6: import { spawn, type ChildProcess } from 'node:child_process'; L7: import { getAgentDir } from '@earendil-works/pi-coding-agent';

High

Child Process

Package source references child process execution.

swarm/spawn.tsView on unpkg · L5

dist/harness/cli.jsView file

116* When the CLI runs inside a pi bash session, the ancestry looks like: L117: * zsh → pi (PID N) → bash -c "pi-messenger-swarm ..." → node (CLI) L118: *

High

Shell

Package source references shell execution.

dist/harness/cli.jsView on unpkg · L116

47*/ L48: import { execSync, spawn as spawnChild } from 'node:child_process'; L49: import * as fs from 'node:fs'; ... L51: import { fileURLToPath } from 'node:url'; L52: import * as http from 'node:http'; L53: const __filename = fileURLToPath(import.meta.url); L54: const __dirname = path.dirname(__filename); L55: const PORT = Number(process.env.PI_MESSENGER_PORT ?? 9877); L56: const HOST = '127.0.0.1';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/harness/cli.jsView on unpkg · L47

Findings

4 High4 Medium4 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processswarm/spawn.ts

HighShelldist/harness/cli.js

HighSame File Env Network Executiondist/harness/cli.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

swarm/spawn.tsView file

Lines 1-25typescript

1import * as fs from 'node:fs';

2import * as path from 'node:path';

3import { tmpdir } from 'node:os';

4import { fileURLToPath } from 'node:url';

5import { randomUUID } from 'node:crypto';

6import { spawn, type ChildProcess } from 'node:child_process';

7import { getAgentDir } from '@earendil-works/pi-coding-agent';

High

Child Process

Package source references child process execution.

swarm/spawn.tsView on unpkg · L5

8import { generateMemorableName } from '../lib.js';

9import { createProgress, parseJsonlLine, updateProgress } from './progress.js';

10import { removeLiveWorker, updateLiveWorker } from './live-progress.js';

11import type { SpawnRequest, SpawnedAgent } from './types.js';

12import { formatRoleLabel } from './labels.js';

13import { loadAgentDefinition } from './agent-loader.js';

15const AGENT_END_DESPAWN_MS = 10 * 60 * 1000;

17interface SpawnRuntime {

18 process: ChildProcess;

19 record: SpawnedAgent;

20 startMs: number;

21 stopping: boolean;

22 persisted?: boolean;

23 idleTimer?: ReturnType<typeof setTimeout>;

24 // Runtime restored from disk after server restart — no ChildProcess handle,

25 // just a PID we poll for liveness.

dist/harness/cli.jsView file

Lines 27-67javascript

27 * pi-messenger-swarm release

28 * pi-messenger-swarm set-status "debugging auth"

29 * pi-messenger-swarm rename NewName

30 * pi-messenger-swarm spawn --role Researcher "Analyze the protocol" --task-id task-1 [--persona "..."] [--agent-file path] [--objective "..."] [--context "..."] [--message-file <path>] [--force]

31 * pi-messenger-swarm spawn list

32 * pi-messenger-swarm spawn history

33 * pi-messenger-swarm spawn stop <id>

34 * pi-messenger-swarm --status

35 * pi-messenger-swarm --start

36 * pi-messenger-swarm --stop

37 * pi-messenger-swarm --restart

38 * pi-messenger-swarm --logs

39 *

40 * Also accepts JSON for programmatic use:

41 * pi-messenger-swarm '{ "action": "task.claim", "id": "task-1" }'

42 *

43 * Agent identity is resolved automatically from the process tree —

44 * no environment variables required. The CLI finds its parent pi process

45 * and sends the PID to the harness server, which matches it against

46 * registrations on disk.

47 */

48import { execSync, spawn as spawnChild } from 'node:child_process';

49import * as fs from 'node:fs';

50import * as path from 'node:path';

51import { fileURLToPath } from 'node:url';

52import * as http from 'node:http';

53const __filename = fileURLToPath(import.meta.url);

54const __dirname = path.dirname(__filename);

55const PORT = Number(process.env.PI_MESSENGER_PORT ?? 9877);

56const HOST = '127.0.0.1';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/harness/cli.jsView on unpkg · L47

57const BASE_URL = `http://${HOST}:${PORT}`;

58const LOG = process.env.PI_MESSENGER_LOG ?? '/tmp/pi-messenger-swarm.log';

59const SERVER_SCRIPT = path.resolve(__dirname, 'server.js');

60const CLI_VERSION = (() => {

61 try {

62 const pkgPath = path.resolve(__dirname, '..', '..', 'package.json');

63 const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));

64 return pkg.version || 'unknown';

65 }

66 catch {

67 return 'unknown';

Lines 96-136javascript

96 timeout: 30_000,

97 }, (res) => {

98 const chunks = [];

99 res.on('data', (c) => chunks.push(c));

100 res.on('end', () => {

101