registry / pi-producthunt / 0.3.0

pi-producthunt@0.3.0

Pi extension package for Product Hunt research and digest workflows.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `/producthunt:login` or invokes Product Hunt tools.

Impact

A supplied Product Hunt token is persisted locally and transmitted to Product Hunt for requested queries.

Mechanism

User-authorized credential storage and Product Hunt GraphQL access.

Rationale

No malicious chain was found, but explicit user-command mutation of Pi-agent configuration is a warn-class capability under the policy.

Evidence

package.jsonextensions/index.tslib/auth-store.tslib/api.tslib/config.ts~/.pi/agent/pi-producthunt-auth.json

Network endpoints1

api.producthunt.com/v2/api/graphql

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Dangerous Capability with low false-positive risk.

pi-producthunt@0.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code