LPM treats this as warn-only first-party agent extension lifecycle risk. The Pi extension can create and remove manifest-tracked subagent configuration files. No exfiltration or remote execution is present.
Static reason
No blocking static signals were detected.
Trigger
Pi session start or an explicit profile switch with configured subagents.
Impact
Can alter available Pi subagents within the user's Pi agent directory.
Mechanism
runtime synchronization of Pi subagent configuration
Rationale
No concrete malicious chain was found, but this first-party Pi extension performs runtime agent-configuration lifecycle changes. Treat as a warning-level extension lifecycle risk rather than a block.
Evidence
package.jsonindex.tsprofile-loader.tssubagent-sync.ts~/.pi/profiles/.active~/.pi/profiles/.subagent-manifest.json~/.pi/agent/agents/<name>.md