pi-coding-agent-extensions
Fail
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches the Bun runtime installer from its official domain and executes it directly via a piped shell command.- [COMMAND_EXECUTION]: Provides several implementation examples for extensions that use 'child_process.spawn' and 'child_process.execSync' to interact with the host system.- [COMMAND_EXECUTION]: The 'agent-team' extension example demonstrates executing shell commands with interpolated user-provided strings ('args.task'), which represents a significant command injection risk if implemented without validation.- [DATA_EXFILTRATION]: Suggests modifying user shell profiles (such as '~/.zshrc') to automate the loading of environment variables and sensitive API keys from '.env' files.
Recommendations
- HIGH: Downloads and executes remote code from: https://bun.sh/install - DO NOT USE without thorough review
Audit Metadata