registry / pi-permission-modes / 2.1.2

pi-permission-modes@2.1.2

Declarative, user-definable permission modes for the pi coding agent: OS-level sandboxing (bubblewrap / sandbox-exec), an allow/ask/deny policy engine, real bash AST gating (tree-sitter), tool hiding, and skill/custom-tool gating.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 26 file(s), 161 KB of source

Source & flagged code

2 flagged

package.jsonView file

Lines 25-65json

25 "security",

26 "plan-mode",

27 "tree-sitter",

28 "policy",

29 "opencode"

30 ],

31 "engines": {

32 "node": ">=22.6.0"

33 },

34 "files": [

35 "src/",

36 "schemas/",

37 "permission-mode.defaults.json",

38 "README.md",

39 "LICENSE",

40 "CHANGELOG.md",

41 "CONTRIBUTING.md",

42 "SECURITY.md"

43 ],

44 "scripts": {

45 "postinstall": "echo 'permission-mode: dependencies installed.'",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L45

46 "test": "node --test ./src/*.test.ts",

47 "typecheck": "tsc --noEmit"

48 },

49 "pi": {

50 "extensions": [

51 "./src/index.ts"

52 ],

53 "video": "https://github.com/wynainfo/pi-permission-modes/releases/download/v2.1.0/pi-permission-modes-demo-web.mp4"

54 },

55 "dependencies": {

56 "@anthropic-ai/sandbox-runtime": "0.0.26",

57 "tree-sitter-bash": "^0.25.1",

58 "web-tree-sitter": "^0.25.10"

59 },

60 "peerDependencies": {

61 "@earendil-works/pi-ai": "*",

62 "@earendil-works/pi-coding-agent": "*",

63 "@earendil-works/pi-tui": "*"

64 },

65 "devDependencies": {

src/paths.test.tsView file

Lines 31-71typescript

32test("isOutside: parent traversal escapes", () => {

33 assert.equal(isOutside(ROOT, ".."), true);

34 assert.equal(isOutside(ROOT,

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = echo 'permission-mode: dependencies installed.'

High

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code