pi-worker@0.8.0: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

pi-worker@0.8.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node npm/scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

44"scripts": { "postinstall": "node npm/scripts/postinstall.mjs", "stage": "node npm/scripts/stage-package.mjs",

High

Suspicious Lifecycle Evidence

The package registers an automatic postinstall hook.

package.jsonView on unpkg · L44

•scripts.postinstall = node npm/scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

npm/lib/skill-install.mjsView file

61Install-time code directly mutates a foreign AI-agent control surface: L233: const resolved = resolveTargets(rules, runtime) ?? []; L234: return targetsFromResolved([...resolved, path.join(home, ".agents", "skills")], cwd, platform); L235: } ... L237: function requiredTargetList({ rules, agentIds, runtime, cwd, platform }) { L238: const agentsById = new Map(rules.agents.map((agent) => [agent.id, agent])); L239: const resolved = agentIds.map((id) => { ... L678: L679: const canonical = path.join(home, ".agents", "skills", SKILL_NAME); L680: const states = []; ... L812: }); L813: const agentsById = new Map(rules.agents.map((agent) => [agent.id, agent])); L814: const detectedGlobalAgentIds = detected.filter((id) => agentsById.get(id)?.rule.kind !== "no-global-target"); Write operation from np

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

npm/lib/skill-install.mjsView on unpkg · L61

npm/native/linux-arm64/pi-workerView file

•path = npm/native/linux-arm64/pi-worker kind = native_binary sizeBytes = 3604642 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

npm/native/linux-arm64/pi-workerView on unpkg

npm/scripts/postinstall.mjsView file

49let outcome = "failed"; let targetCount; try { const result = await install(); outcome = result?.outcome ?? "failed"; targetCount = result?.targetCount;

High

Suspicious Lifecycle Evidence

The postinstall hook invokes the skill installer without a user command.

npm/scripts/postinstall.mjsView on unpkg · L49

npm/generated/skills-rules.jsonView file

2"schemaVersion": 3, "skillsVersion": "1.5.23", "agentCount": 77, "globalTargetCount": 75, "noGlobalTargetCount": 2, "agents": [

High

Ai Review Evidence

The bundled rules target 77 agents, including 75 global targets.

npm/generated/skills-rules.jsonView on unpkg · L2

Source & flagged code

8 flagged

package.jsonView file

Lines 24-61json

24 },

25 "bin": {

26 "pi-worker": "npm/bin/pi-worker.mjs"

27 },

28 "files": [

29 "npm/bin/",

30 "npm/generated/",

31 "npm/lib/",

32 "npm/native/",

33 "npm/scripts/postinstall.mjs",

34 "skills/pi-worker/",

35 "README.md",

36 "CONTRIBUTING.md",

37 "SECURITY.md",

38 "LICENSE",

39 "THIRD_PARTY_NOTICES"

40 ],

41 "dependencies": {

42 "skills": "1.5.23"

43 },

44 "scripts": {

45 "postinstall": "node npm/scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L45

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L45

46 "stage": "node npm/scripts/stage-package.mjs",

High

Suspicious Lifecycle Evidence

The package registers an automatic postinstall hook.

package.jsonView on unpkg · L44

47 "test": "node --test npm/test/*.test.mjs",

48 "check:rules": "node npm/scripts/extract-skills-rules.mjs --check npm/generated/skills-rules.json",

49 "check:notices": "go run ./tools/notices --check THIRD_PARTY_NOTICES",

50 "check:piversion": "go run ./tools/piversion --check",

51 "check:hygiene": "node npm/scripts/check-hygiene.mjs",

52 "check:gofmt": "! gofmt -l $(git ls-files '*.go') | grep .",

53 "check:govet": "go vet ./...",

54 "check:gotest": "go test -race -count=1 ./...",

55 "notices:check": "npm run check:notices",

56 "skills-rules:check": "npm run check:rules",

57 "verify": "npm run check:gofmt && npm run check:govet && npm test && npm run check:rules && npm run check:notices && npm run check:hygiene && npm run check:piversion && npm run check:gotest",

58 "prepack": "npm run check:notices && npm run check:rules && npm run check:hygiene && npm run check:piversion"

59 }

60}

61

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

npm/lib/skill-install.mjsView file

Lines 41-81javascript

41const GLOBAL_RETRY = "npm install -g --foreground-scripts pi-worker";

42const MAX_RECEIPT_BYTES = 1024 * 1024;

43const CHILD_GRACE_MS =

npm/native/linux-arm64/pi-workerView file

•path = npm/native/linux-arm64/pi-worker kind = native_binary sizeBytes = 3604642 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

npm/native/linux-arm64/pi-workerView on unpkg

npm/scripts/postinstall.mjsView file

Lines 29-67javascript

29 const normalized = ["installed", "blocked", "skipped"].includes(outcome)

30 ? outcome

31 : "failed";

32

npm/generated/skills-rules.jsonView file

Lines 1-22json

1{

2 "schemaVersion": 3,

3 "skillsVersion": "1.5.23",

4 "agentCount": 77,

5 "globalTargetCount": 75,

6