extension
pi-playpen
Global, multi-project OS sandboxing for the pi coding agent
+2
Packages
6.2k listings for pi
🛡 Guards & policy Block or rewrite dangerous tool calls, sandbox commands, enforce permissions.
323 results · page 3 of 7
extension
@mammothb/pi-permissions
Permission enforcement extension for pi — gates tool calls, bash commands (via arbiter executable), and file paths
+1
extension
@diegopetrucci/pi-agent-workflow-audit
A pi extension that runs an isolated repo workflow audit and returns only the final report to the main session.
+1
extension
pi-bash-confirm
Pi package for confirming bash commands before execution with Telegram notifications
+1
toolextension
@bacnh85/pi-windows-tools
Pi extension for Windows-native tool manipulation — shell profiles, path conversion, command execution, WSL bridge, safety policy, and developer tool discovery.
+1
extension
@ramtinj95/pi-infra-command-guard
Approval guard for risky infrastructure, cloud, container, repository, secret, and local file commands in Pi and GPT-5.6 Code Mode
+2
extension
@ogulcancelik/pi-auto-permissions
Context-aware Bash permissions for Pi with automated guardian review.
+3
extension
pi-marketplace
Pi extension for searching, auditing, and installing pi packages from npm — with security review and optional pi.dev enrichment
+1
skillextension
pi-skill-shiori
Pi extension that reduces Agent Skill catalog tokens with policy-based skill retrieval and on-demand skill loading.
+1
skilltool
oh-my-vul
Evidence-first vulnerability research skills and CLI for Pi, Codex, and Claude Code
promptextension
@d3ara1n/pi-access-denied
Sandbox write/edit/bash to the project dir — prompt / deny / allow modes, configurable deny-with-redirect rules, per-session allow-deny memory
extension
pi-minimal-permission-system
Minimal permission enforcement extension for the Pi coding agent.
extension
@eggmasonvalue/pi-subagent
Observable, steerable, isolated-context subagents for pi — resume any child mid-task, flush partial results on interrupt/timeout, lean machine-facing envelope, optional model allowlist.
extension
@pandi-coding-agent/pandi-container
Extensión de Pi para administrar sandboxes de Apple `container` (micro-VMs Linux): un comando /container y una herramienta container_sandbox invocable por el modelo (status/list/create/run/stop/remove).
extension
pi-herdr-sudo-task
Blocking, user-approved sudo tasks in a dedicated Herdr pane
skill
@blackbelt-technology/pi-dashboard-eng-disciplines
Cross-cutting engineering-discipline skills for pi sessions — interview-me, doubt-driven-review, code-simplification, security-hardening, performance-optimization, observability-instrumentation, systematic-debugging, node-inspect-debugger, scenario-design
extension
@vtstech/pi-security
Security extension for Pi Coding Agent
+1
extension
@false00/pi-elasticsearch
Production-focused Elasticsearch automation tools for the Pi coding agent — curated tools for search, documents, indices, cluster administration, security, lifecycle, and full API reach via the official JS client and raw REST access
extension
@spences10/pi-confirm-destructive
Git-aware Pi guardrail that asks for confirmation before destructive shell actions can change or lose work
promptextension
@false00/cyber-news
Interactive cybersecurity news briefing for the Pi coding agent with live multi-source headlines and deep-dive story prompts
extension
pi-widget-host
Host package for managing one shared Pi widget slot across multiple providers with preset policies and a built-in demo provider.
extension
pi-defender
Defense-in-depth protection for Pi coding agent. Blocks dangerous commands and protects sensitive files — rename of pi-damage-control.
+4
extension
@shelken/pi-guard
Hard-block dangerous agent bash commands and secret path access
extension
@guygrigsby/pi-subagent-routing
Inject a subagent model-routing policy: the orchestrator plans and judges on its own live model and fans implementation out to cheaper subagents, reviewing before it accepts.
skill
@firstpick/pi-skill-deep-research
Agents should invoke this skill for high-stakes or complex research needing multi-source evidence, scientific/technical fact-checking, decision traces, or rigorous verification. Runs deterministic two-phase research with schema/policy validation.
extension
pi-guard
General-purpose permission system for pi tools, handling permissions for bash and file tools with extensible matchers for custom tools.
skilltool
@blackbelt-technology/pi-dashboard-code-review-toolkit
Code-review workflow skills for pi sessions — code-review (AI-powered review with severity labels via the CodeRabbit CLI) and autofix (safely review and apply CodeRabbit PR review-thread feedback with per-change approval). Pure-skill package, no extension
extension
pi-code-tool
Code-mode tool for the pi coding agent: a sandboxed Python meta-tool (via @pydantic/monty) that lets the agent write code against host tools and build ephemeral code tools
extension
pi-supersafety
When the example safety extensions don't cover what you need, this should! Simple with approval flow and windows sandbox capability (with Sandboxie)
extension
smart-approve
High-risk-only approval hook with LLM risk analysis, behavior detection, protected-path interception, and decision memory for oh-my-pi (OMP) and pi-agent.
+1
promptextension
@dougbots/pi-agents
Agent profiles for pi — preconfigured model, system prompt, tool restrictions, and permission gates
+1
extension
@pandi-coding-agent/pandi-podman
Extensión de Pi para ejecutar sandboxes efímeros y restringidos con Podman mediante /podman y la tool podman_sandbox.
extension
@celestoai/pi
Run Pi coding tools in a Celesto computer
+4
extension
pi-approval-guardian
A fail-closed-by-default Pi approval gate that reviews shell actions, private data access, and sensitive file mutations with an isolated risk model and explicit temporary bypass.
+1
toolextension
pi-opa-net
OPA-backed bash command guard for the pi ecosystem — structured decision-output.v1 JSON, fail-open default, Claude Code hook protocol compatible. Agent-agnostic engine + CLI.
extension
pi-ward
File access guard for the pi coding agent — declarative filesystem boundaries.
skill
@getpipher/x-api
X/Twitter API v2 reference skill for pi — auth (Bearer / OAuth 1.0a / 2.0), endpoints, pricing, and a mandatory cost guard.
extension
pi-enclave
VM-isolated sandbox for pi with automatic secret protection · from yapp
+2
skill
@firstpick/pi-package-skill-lifecycle
Self-contained Pi package for skill lifecycle management: memory, skill-bank audit, evaluation, creation, and refinement tools.
+1
extension
@josephyoung/pi-heimdall
Guardian extension for pi — security guards that block accidental secret exposure, enforce command policies, protect .env files, and sandbox bash commands
+1
extension
pi-permission-suite
Four approval modes + command-level security restrictions for the Pi coding agent. Act / Auto / Ask / Plan mode switching, rule engine, subagent auto-approval.
+2
extension
pi-obsidian-vault
Agent-safe Obsidian vault access for Pi: auto-detect, retrieve, validate, plan, write, edit, manage, and explicitly destroy Markdown with human approval.
skillextension
agent-booster-pack
Agent Booster Pack for Pi: skills + Interface Design Gate runtime + proof-first runtime + whiteboarding guard + final value guard, in one install. Meta-package; depends on the four siblings.
+2
extension
pi-permission-gate
Config-driven permission system for Pi agents. Deny-by-default tool restriction with glob matching, path normalization, self-protection, and structured logging.
skillextension
implannotator
Approval-gated frontend implementation for Pi, combining Implannotator design guidance with Plannotator reviews.
+3
extension
@0xkobold/pi-gateway
Hermes-style messaging gateway for pi - multi-platform agent with sessions, security, and background tasks
+2
extension
@xaccefy/pi-exploitsearch
ExploitSearch extension for Pi Agent — query preview.is security corpus for attack techniques, primitives, and bypasses
extension
pi-cwd-guard
Small Pi safety extension for cwd access, protected paths, runtime config confirmation, and common destructive bash commands.