registry / pi-orchestrator-config / 4.3.8
pi-orchestrator-config@4.3.8
Orchestrator pattern for pi: specialist subagents, enforcement, code review loop, workflow commands
AI Security Review
scanned 15d ago · by lpm-firewall-aiSource inspection found package-aligned runtime behavior and no install-time attack. The flagged process and network operations are bounded to the described features, including dashboard forwarding to a loopback daemon.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Image requests occur when the image tool is used; validation runs at session start; UI installation runs only when the UI build output is missing.
Impact
No unrelated credential recipient, unconsented control-surface mutation, or other concrete attack impact was established.
Mechanism
The image tool sends requests to Gemini with an environment-provided key. Pidash forwards session history to a loopback daemon, while the UI fallback installs and builds UI dependencies.
AI rationale
Source inspection found package-aligned runtime behavior and no install-time attack. The flagged process and network operations are bounded to the described features, including dashboard forwarding to a loopback daemon.
Evidence
package.jsonextensions/image-gen/image-gen.tsextensions/orchestrator/session-validation.tsscripts/serve-ui.tsextensions/pidash/pidash.tsscripts/daemon-shared.ts
Network endpoints2
generativelanguage.googleapis.com/v1beta/models/${encodeURIComponent(model)}:generateContentws://127.0.0.1:${pidashPort}/ws/pi
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest runs a UI build during prepack and declares the package’s Pi extensions; it has no install lifecycle hook.
- The image tool reads a Gemini key from the environment and sends image-generation requests to Google’s Gemini API.
- Session validation checks for the uv command at session start.
- The UI server runs npm install and a build only in its missing-UI fallback.
- Pidash forwards session history to a daemon configured to listen on loopback; no unrelated collector was identified.
Evidence against
- Pidash replays session message content to its dashboard connection.
- The UI fallback can run npm install and a build at runtime.
- Session validation invokes a shell command to check whether uv is available.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
7 flaggedextensions/image-gen/image-gen.tsView file
15import * as path from "node:path";
L16: import { execFileSync, spawn } from "node:child_process";
L17: import { fileURLToPath } from "node:url";
High
Child Process
Package source references child process execution.
extensions/image-gen/image-gen.tsView on unpkg · L15extensions/orchestrator/session-validation.tsView file
200" • macOS/Linux: curl -LsSf https://astral.sh/uv/install.sh | sh\n" +
L201: " • Windows: powershell -ExecutionPolicy ByPass -c \"irm https://astral.sh/uv/install.ps1 | iex\"\n" +
L202: " • Docs: https://docs.astral.sh/uv/",
High
Shell
Package source references shell execution.
extensions/orchestrator/session-validation.tsView on unpkg · L200extensions/shared/file-logger.ts
Findings
1 Critical4 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltaextensions/pidash/pidash.ts
HighChild Processextensions/image-gen/image-gen.ts
HighShellextensions/orchestrator/session-validation.ts
HighRuntime Package Installscripts/serve-ui.ts
HighSemantic Analysis Limitedextensions/image-gen/image-gen.ts#virtual:normalized:round1
MediumDynamic Requireextensions/shared/file-logger.ts
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/build-extension-uis.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to pi-orchestrator-config@4.3.8.
See all versions of pi-orchestrator-config for other recorded verdicts.
- Review the evidence and your use of pi-orchestrator-config@4.3.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.