registry / pi-orchestrator-config / 4.24.0
pi-orchestrator-config@4.24.0
Orchestrator pattern for pi: specialist subagents, enforcement, code review loop, workflow commands
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package manifest contains no install-time lifecycle hook, and the reviewed API key flow sends the key to Google's Gemini API for image generation. The flagged runtime commands are consistent with serving or building the package's UI and offering an optional uv installation instruction.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A caller explicitly invokes the generate_image tool with a configured image model.
Impact
The key is used for its intended service; no unrelated credential destination or automatic install-time collection was found.
Mechanism
The tool reads a Gemini API key from the environment and sends it with the requested prompt to Google's Gemini API.
AI rationale
The package manifest contains no install-time lifecycle hook, and the reviewed API key flow sends the key to Google's Gemini API for image generation. The flagged runtime commands are consistent with serving or building the package's UI and offering an optional uv installation instruction.
Network endpoints1
generativelanguage.googleapis.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install, preinstall, or postinstall script; its lifecycle-adjacent script is prepack.
- Image generation is exposed as a named tool and requires a configured image model.
- The tool reads GEMINI_API_KEY or GOOGLE_API_KEY for its image-generation request.
- The key is sent to Google's Gemini API in the x-goog-api-key header.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
16 flaggedextensions/image-gen/image-gen.tsView file
15import * as path from "node:path";
L16: import { execFileSync, spawn } from "node:child_process";
L17: import { fileURLToPath } from "node:url";
High
Child Process
Package source references child process execution.
extensions/image-gen/image-gen.tsView on unpkg · L15•matchType = normalized_sha256
matchedPackage = pi-orchestrator-config@4.20.0
matchedPath = extensions/image-gen/image-gen.ts
matchedIdentity = npm:cGktb3JjaGVzdHJhdG9yLWNvbmZpZw:4.20.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
extensions/image-gen/image-gen.tsView on unpkgextensions/orchestrator/git-helpers.tsView file
Findings
1 Critical13 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltaextensions/orchestrator/subagent-tool.ts
HighChild Processextensions/image-gen/image-gen.ts
HighShellextensions/orchestrator/git-helpers.ts
HighRuntime Package Installscripts/serve-ui.ts
HighSemantic Analysis Limitedextensions/image-gen/image-gen.ts#virtual:normalized:round1
HighKnown Malware Source Similarityextensions/image-gen/image-gen.ts
HighKnown Malware Source Similarityextensions/orchestrator/git-helpers.ts
HighKnown Malware Source Similarityextensions/orchestrator/review-learning.ts
HighKnown Malware Source Similarityextensions/orchestrator/dreaming.ts
HighKnown Malware Source Similarityextensions/orchestrator/session-validation.ts
Affected versions and remediation
This report applies to pi-orchestrator-config@4.24.0.
See all versions of pi-orchestrator-config for other recorded verdicts.
- Review the evidence and your use of pi-orchestrator-config@4.24.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.