registry / pi-orchestrator-config / 4.24.1
pi-orchestrator-config@4.24.1
Orchestrator pattern for pi: specialist subagents, enforcement, code review loop, workflow commands
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe reviewed network and shell behavior matches image generation, project review learning, Git helpers, and UI builds. The package has no install lifecycle hook, and the changed review-learning code is setting-gated and triggered by explicit review commands.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Image API requests occur when the image-generation tool is invoked; review distillation follows an explicit review command when enabled; UI dependencies are installed only after a UI request encounters missing build output.
Impact
These operations support the package's stated orchestration, image generation, review-learning, and dashboard features; no unrelated collection or concealed execution was found.
Mechanism
The inspected code sends prompts and the configured Gemini key to Google's Gemini API, stores distilled review lessons in project memory, and uses shell commands for Git or UI build tasks.
AI rationale
The reviewed network and shell behavior matches image generation, project review learning, Git helpers, and UI builds. The package has no install lifecycle hook, and the changed review-learning code is setting-gated and triggered by explicit review commands.
Evidence
.pi/data/reviews.db.pi/data/review-learning-state.json.pi/tmp/UI dist directories
Network endpoints1
generativelanguage.googleapis.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares build and prepack scripts, with no preinstall, install, or postinstall hook.
- Image generation sends the requested generation prompt and Gemini API key to Google's Gemini API when the tool is invoked.
- Review learning watches for explicit reviews address or store-session commands and is disabled unless the project setting enables it.
- Distilled review lessons are written through the project's internal memory path.
- The UI server runs npm install only when a requested UI file and its index are missing and a UI package.json exists.
Evidence against
- The package includes shell execution and a runtime npm install path, but the inspected call sites tie them to Git/UI functionality rather than concealed payload execution.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
14 flaggedextensions/image-gen/image-gen.tsView file
15import * as path from "node:path";
L16: import { execFileSync, spawn } from "node:child_process";
L17: import { fileURLToPath } from "node:url";
High
Child Process
Package source references child process execution.
extensions/image-gen/image-gen.tsView on unpkg · L15•matchType = normalized_sha256
matchedPackage = pi-orchestrator-config@4.20.0
matchedPath = extensions/image-gen/image-gen.ts
matchedIdentity = npm:cGktb3JjaGVzdHJhdG9yLWNvbmZpZw:4.20.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
extensions/image-gen/image-gen.tsView on unpkgextensions/orchestrator/git-helpers.tsView file
Findings
1 Critical11 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltaextensions/orchestrator/review-learning.ts
HighChild Processextensions/image-gen/image-gen.ts
HighShellextensions/orchestrator/git-helpers.ts
HighRuntime Package Installscripts/serve-ui.ts
HighSemantic Analysis Limitedextensions/image-gen/image-gen.ts#virtual:normalized:round1
HighKnown Malware Source Similarityextensions/image-gen/image-gen.ts
HighKnown Malware Source Similarityextensions/orchestrator/git-helpers.ts
HighKnown Malware Source Similarityextensions/orchestrator/session-validation.ts
HighKnown Malware Source Similarityextensions/orchestrator/settings-source.ts
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to pi-orchestrator-config@4.24.1.
See all versions of pi-orchestrator-config for other recorded verdicts.
- Review the evidence and your use of pi-orchestrator-config@4.24.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.