pi-agent-integration
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of technical documentation and integration instructions for the Pi Agent Core library. No evidence of prompt injection, data exfiltration, obfuscation, or malicious command execution was found across the SKILL.md or reference files.\n- [EXTERNAL_DOWNLOADS]: The skill references the
@earendil-works/pi-agent-corepackage from the NPM registry at a specific version (0.84.1). This is the primary subject of the skill and is documented as a standard library dependency.\n- [INDIRECT_PROMPT_INJECTION]: The documentation provides guidance on how to manage surfaces related to external data ingestion:\n * Ingestion points: Documented throughAgent.prompt(),Agent.steer(), andAgent.followUp()methods inSKILL.mdandreferences/api-surface.md.\n * Boundary markers: The instructions explicitly recommend preserving assistant message boundaries when forwarding multi-message output.\n * Capability inventory: The documented library supports tool execution (parallel/sequential), network proxying (streamProxy), and filesystem storage for sessions.\n * Sanitization: The skill recommends usingtransformContextandconvertToLlmhooks to prune, filter, or map external messages before they are sent to the provider.
Audit Metadata