toolextension
pi-perms
Pi CLI extension — configurable permission policy from .agents/permissions.json and native agent configs
Packages
6.2k listings for pi
🛡 Guards & policy Block or rewrite dangerous tool calls, sandbox commands, enforce permissions.
323 results · page 2 of 7
extension
@4meta5/pi-ozcar
Pi-first audit extension package for structured security reviews and deterministic comparison exports
extension
pi-permissive
A deliberately permissive permission gate for the Pi coding agent — blocks only destructive commands, never nags.
extension
@bytesbrains/pi-agent-supervisor
Runtime safety net for AI agents — blocks dangerous commands, protects files, enforces rate limits, and records sessions.
extension
pi-switch-model
Free-form, LLM-driven model switching for Pi — resolve a free-text model reference and switch mid-conversation, no approval loop, no auto-restore
skillextension
@haemmid/pi-skill-paths
Canonical SKILL.md path correction and bash skill-access guard for Pi.
skill
pi-dependency-safety
Pi skill for reviewing npm-registry dependency safety across npm, pnpm, yarn, and bun before project initialization, feature work, package additions, or package updates.
extension
@ikuradon/pi-guardian
Codex-style sandbox boundary guardian gate for pi-coding-agent.
+1
promptextension
@jaraxxxx/pi-extensions
A comprehensive collection of extension packages for Pi the coding agent — token guard, system context, tool profiler, project detector, dirty guard, permission gate, prompt customizer, auto commit, turn clock, branch navigator, and more.
+1
extension
@baryonlabs/pi-dynamic-workflows
Claude-Code-style dynamic workflow orchestration for Pi (Baryon fork: crash-safe script errors + guarded sandbox).
extension
pi-shepherd
Line count guard and behavior rules extension for pi-coding-agent
+4
toolextension
cc-safety-net
A coding agent CLI hook - block destructive git and filesystem commands before execution
+1
extension
betterwright
A persistent, policy-guarded Playwright browser for AI agents with network controls, trusted credential filling, proof screenshots, and CAPTCHA helpers.
+4
extension
@erichll/pi-auto-review
Model-backed boundary approval broker for Pi
+2
promptextension
pi-sandbox
OS-level sandboxing for pi with interactive permission prompts
+2
extension
@erichll/pi-sandbox
Sandbox Runtime-backed Linux and macOS sandbox with pi-auto-review approval
+3
extension
@aliou/pi-guardrails
+2
extension
@amaster.ai/pi-security
Pi extension for resource-aware security policy engine and tool authorization
extension
@nklisch/pi-enhanced
Pi, enhanced — one install for nklisch's full harness: policy-gated command review, plugin marketplace, subagents, background tasks, research tools, search, model modes, and a curated UX set.
+8
extension
@pi-unipi/compactor
Context engine for Pi — zero-LLM compaction, session continuity, sandbox execution, and tool display optimization
+2
extension
@agentapprove/pi
Agent Approve extension for Pi - approve or deny AI agent tool calls from your iPhone and Apple Watch
+2
promptextension
@hank-warren/pi-permission-selector
Numbered approval options and Tab-to-comment for Pi's extension select dialogs, including pi-auto-permissions command approval prompts.
skillprompt
@piagent/platform
Reusable Pi agent platform, project adapters, MCP/tool policy, and coding workflow harness.
+4
extension
@spences10/pi-redact
Tool-output redaction for Pi that replaces likely secrets before they reach the model context
extension
@senad-d/guardme
Deny-first Pi guardrails that keep LLM shell and file access safe, transparent, and user-approved.
extension
pi-redact-all
Global tool-output redaction for Pi — redacts secrets, certificates, PII, and connection strings across all tools before they reach the model.
extension
pi-permission-system
Permission enforcement extension for the Pi coding agent.
+3
extension
@johanthoren/jeff
Jeff is a model-native quality control plane and cooperative workflow protocol for trusted operators and friendly agents, not a security sandbox.
+1
extension
@zhushanwen/pi-permission
Pi permission extension — four permission modes (yolo/auto/approve/strict) with three-layer pipeline (AST + rules + AI classifier).
extension
@agwab/pi-subagent
Minimal subagent runtime for Pi.
+1
extension
@xynogen/pix-gate
Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)
skillextension
@ory/pi
Ory plugin for Pi (the minimal coding agent): scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
extension
pi-streaming-guard
Keep Pi's TUI responsive during long streamed responses with incremental Markdown rendering
extension
@monotykamary/pi-localterm
localterm <-> pi integration: Kitty graphics for the browser renderer, scrubbing localterm-managed secret env vars from the agent's bash-tool children, and OSC 9 desktop notifications when the agent finishes a long turn.
extension
@gotgenes/pi-permission-model-judge
Deny-first typo-path model judge — a pi-permission-system Authorizer chain link
extension
@xaccefy/pi-casefile
Offensive security case tracker for Pi Agent — bug bounties, CTFs, security audits
+2
extension
@daytona/pi
Pi coding agent extension that runs all tool calls inside a remote, ephemeral Daytona sandbox while the agent runs locally
+2
skill
amber-protocol
Amber Protocol: repository-local governance kit for coding agents — install, audit, validate, and hand off agent-facing project state.
skillextension
pi-permission-modes
Declarative, user-definable permission modes for the pi coding agent: OS-level sandboxing (bubblewrap / sandbox-exec), an allow/ask/deny policy engine, real bash AST gating (tree-sitter), tool hiding, and skill/custom-tool gating.
+3
extension
@firstpick/pi-extension-safety-guard
Interactive guardrails for dangerous bash commands and protected file edits in Pi.
extension
@mzwing/pi-permission-auto-review
Codex-style automatic approval reviews for @gotgenes/pi-permission-system
promptextension
@diegopetrucci/pi-dirty-repo-guard
A pi extension that prompts before session changes when the current git repo has uncommitted changes.
extension
@casualjim/pi-heimdall
Guardian extension for pi — security guards that block accidental secret exposure, enforce command policies, protect .env files, and sandbox bash commands
+1
extension
@vanillagreen/pi-output-policy
OMP-style large-output policy for Pi tool results: minimization, bounded truncation, and spill-file preservation.
toolextension
decorated-pi
decorated-pi is a practical enhancement pack for pi coding agent — token-efficient workflow, cache-friendly design, and smarter tools.
+5
extension
pi-armory
Declarative command tools for pi — structured, pre-approved commands instead of a shell.
+4
skill
@bacnh85/pi-ux
Anti-slop UI/UX design discipline for your Pi agent — anchors a lintable DESIGN.md, runs deterministic slop-audit gates (APCA contrast + tokens + states + slop tells), works with text-only models, ships reference design-system presets.
+1
extension
@nklisch/pi-clearance
Configurable auto-reviewer Pi extension for parsed, structural command policy
+4