pi-develop

The code appears to implement a developer-controlled command runner and file allowlist, not malware. Its principal risk is that configured checks are executed verbatim through bash -lc, while the blacklist does not reliably prevent shell execution of dangerous or indirect commands. The write/edit restriction is also vulnerable to symlink or filesystem race bypasses because it compares lexical paths without resolving actual targets. Security review should ensure the environment variables are trusted and consider executing structured commands without a shell plus symlink-aware authorization.