registry / pi-orchestrator-config / 4.7.0
pi-orchestrator-config@4.7.0
Orchestrator pattern for pi: specialist subagents, enforcement, code review loop, workflow commands
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe inspected manifest has no install hook, and the flagged execution and network behavior is conditional runtime functionality directed at the intended Gemini API or a local dashboard. The source provides no evidence of unconsented collection, credential export, or other concrete attack behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes image generation, enables pidash, or serves a UI whose built files are missing.
Impact
These behaviors support the package’s image generation, dashboard, and UI serving features; no malicious effect was established.
Mechanism
Image prompts go to Gemini; enabled pidash relays session data to its local daemon; the UI server installs dependencies only to build a missing UI.
AI rationale
The inspected manifest has no install hook, and the flagged execution and network behavior is conditional runtime functionality directed at the intended Gemini API or a local dashboard. The source provides no evidence of unconsented collection, credential export, or other concrete attack behavior.
Network endpoints2
generativelanguage.googleapis.com127.0.0.1
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines only build and prepack scripts; it has no install lifecycle hook.
- Image generation requires a configured model and sends the generated prompt to Google’s Gemini API when the tool is invoked.
- The session validation shell check receives fixed command names at its callers; release notes are fetched with gh only after a version change.
- The UI server attempts npm install and build only when the UI is missing, as part of serving that UI.
- Pidash is disabled unless enabled in project settings, and its session relay connects to the local 127.0.0.1 daemon.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
7 flaggedextensions/image-gen/image-gen.tsView file
15import * as path from "node:path";
L16: import { execFileSync, spawn } from "node:child_process";
L17: import { fileURLToPath } from "node:url";
High
Child Process
Package source references child process execution.
extensions/image-gen/image-gen.tsView on unpkg · L15extensions/orchestrator/session-validation.tsView file
205" • macOS/Linux: curl -LsSf https://astral.sh/uv/install.sh | sh\n" +
L206: " • Windows: powershell -ExecutionPolicy ByPass -c \"irm https://astral.sh/uv/install.ps1 | iex\"\n" +
L207: " • Docs: https://docs.astral.sh/uv/",
High
Shell
Package source references shell execution.
extensions/orchestrator/session-validation.tsView on unpkg · L205extensions/acpx-provider/load-runtime.ts
Findings
1 Critical4 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltaextensions/pidash/pidash.ts
HighChild Processextensions/image-gen/image-gen.ts
HighShellextensions/orchestrator/session-validation.ts
HighRuntime Package Installscripts/serve-ui.ts
HighSemantic Analysis Limitedextensions/image-gen/image-gen.ts#virtual:normalized:round1
MediumDynamic Requireextensions/acpx-provider/load-runtime.ts
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/build-extension-uis.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to pi-orchestrator-config@4.7.0.
See all versions of pi-orchestrator-config for other recorded verdicts.
- Review the evidence and your use of pi-orchestrator-config@4.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.