registry / pi-orchestrator-config / 4.7.1
pi-orchestrator-config@4.7.1
Orchestrator pattern for pi: specialist subagents, enforcement, code review loop, workflow commands
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the suspicious install command is limited to runtime UI recovery when built files are missing. Because that path can run dependency scripts automatically, unresolved execution risk warrants a warning, but the inspected source does not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A daemon serves a UI request when its built UI files are missing.
Impact
Dependency install scripts may execute during this runtime recovery path.
Mechanism
The server checks for the UI package manifest and then runs npm install followed by the build command in that UI directory.
AI rationale
The package has no install lifecycle hook, and the suspicious install command is limited to runtime UI recovery when built files are missing. Because that path can run dependency scripts automatically, unresolved execution risk warrants a warning, but the inspected source does not establish malicious behavior.
Evidence
scripts/serve-ui.ts
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- When a UI file is missing, serving it can automatically run `npm install` and `npm run build` in the UI source directory.
- The manifest defines only a `prepack` build hook; the install command is reachable at runtime when the UI is missing.
Evidence against
- Pidash is disabled unless project settings enable it, and its WebSocket client connects to loopback.
- Image generation is an explicit tool that sends its request and API key to the intended Gemini API endpoint.
- Session validation runs on session start and checks CLI availability; the inspected code does not establish a malicious action.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
7 flaggedextensions/image-gen/image-gen.tsView file
15import * as path from "node:path";
L16: import { execFileSync, spawn } from "node:child_process";
L17: import { fileURLToPath } from "node:url";
High
Child Process
Package source references child process execution.
extensions/image-gen/image-gen.tsView on unpkg · L15extensions/orchestrator/session-validation.tsView file
205" • macOS/Linux: curl -LsSf https://astral.sh/uv/install.sh | sh\n" +
L206: " • Windows: powershell -ExecutionPolicy ByPass -c \"irm https://astral.sh/uv/install.ps1 | iex\"\n" +
L207: " • Docs: https://docs.astral.sh/uv/",
High
Shell
Package source references shell execution.
extensions/orchestrator/session-validation.tsView on unpkg · L205extensions/acpx-provider/load-runtime.ts
Findings
1 Critical4 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltaextensions/pidash/pidash.ts
HighChild Processextensions/image-gen/image-gen.ts
HighShellextensions/orchestrator/session-validation.ts
HighRuntime Package Installscripts/serve-ui.ts
HighSemantic Analysis Limitedextensions/image-gen/image-gen.ts#virtual:normalized:round1
MediumDynamic Requireextensions/acpx-provider/load-runtime.ts
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/build-extension-uis.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to pi-orchestrator-config@4.7.1.
See all versions of pi-orchestrator-config for other recorded verdicts.
- Review the evidence and your use of pi-orchestrator-config@4.7.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.