registry / pi-orchestrator-config / 4.8.4
pi-orchestrator-config@4.8.4
Orchestrator pattern for pi: specialist subagents, enforcement, code review loop, workflow commands
AI Security Review
scanned 15d ago · by lpm-firewall-aiSource inspection found no install lifecycle hook or confirmed malicious behavior. The flagged execution and network use align with image generation, local UI building, Git queries, and pidash's loopback session dashboard.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The reviewed features run when the user invokes image generation, requests the local UI, or starts a pidash-enabled session.
Impact
These paths support the package's described features; the inspected excerpts show no unconsented external credential transfer or install-time attack.
Mechanism
The inspected code sends image requests to Google's API, runs Git queries, conditionally builds a missing local UI, and forwards session events to a loopback daemon.
AI rationale
Source inspection found no install lifecycle hook or confirmed malicious behavior. The flagged execution and network use align with image generation, local UI building, Git queries, and pidash's loopback session dashboard.
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines only build and prepack scripts; it has no install lifecycle hook.
- Image generation reads a caller's Google API key and sends it to Google's Gemini API.
- Git helpers run Git queries with a five-second timeout; the inspected callers use fixed Git arguments.
- The UI build runs only when its dist page is missing and a local UI package.json exists.
- Pidash connects to a loopback WebSocket during session startup and forwards session events to that local daemon.
- The acpx loader searches global and package-local acpx installations and imports the runtime.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
7 flaggedextensions/image-gen/image-gen.tsView file
15import * as path from "node:path";
L16: import { execFileSync, spawn } from "node:child_process";
L17: import { fileURLToPath } from "node:url";
High
Child Process
Package source references child process execution.
extensions/image-gen/image-gen.tsView on unpkg · L15extensions/orchestrator/git-helpers.tsView file
446*
L447: * Quoted text is not automatically inert — `bash -c 'git add x'`,
L448: * `eval '...'` and `"$(git add x)"` all execute — and a heredoc body is inert
High
Shell
Package source references shell execution.
extensions/orchestrator/git-helpers.tsView on unpkg · L446extensions/acpx-provider/load-runtime.tsView file
Findings
1 Critical4 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltaextensions/pidash/pidash.ts
HighChild Processextensions/image-gen/image-gen.ts
HighShellextensions/orchestrator/git-helpers.ts
HighRuntime Package Installscripts/serve-ui.ts
HighSemantic Analysis Limitedextensions/image-gen/image-gen.ts#virtual:normalized:round1
MediumDynamic Requireextensions/acpx-provider/load-runtime.ts
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/build-extension-uis.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to pi-orchestrator-config@4.8.4.
See all versions of pi-orchestrator-config for other recorded verdicts.
- Review the evidence and your use of pi-orchestrator-config@4.8.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.