promptextension
pi-sandbox
OS-level sandboxing for pi with interactive permission prompts
+2
Packages
6.2k listings for pi
🛡 Guards & policy Block or rewrite dangerous tool calls, sandbox commands, enforce permissions.
323 results · page 3 of 7
extension
@amaster.ai/pi-security
Pi extension for resource-aware security policy engine and tool authorization
extension
@agentapprove/pi
Agent Approve extension for Pi - approve or deny AI agent tool calls from your iPhone and Apple Watch
+2
extension
@pi-unipi/compactor
Context engine for Pi — zero-LLM compaction, session continuity, sandbox execution, and tool display optimization
+2
extension
@daytona/pi
Pi coding agent extension that runs all tool calls inside a remote, ephemeral Daytona sandbox while the agent runs locally
+2
extension
pi-permission-system
Permission enforcement extension for the Pi coding agent.
+3
extension
@casualjim/pi-heimdall
Guardian extension for pi — security guards that block accidental secret exposure, enforce command policies, protect .env files, and sandbox bash commands
+1
skillextension
pi-permission-modes
Declarative, user-definable permission modes for the pi coding agent: OS-level sandboxing (bubblewrap / sandbox-exec), an allow/ask/deny policy engine, real bash AST gating (tree-sitter), tool hiding, and skill/custom-tool gating.
+3
extension
@zhushanwen/pi-permission
Pi permission extension — four permission modes (yolo/auto/approve/strict) with three-layer pipeline (AST + rules + AI classifier).
extension
@erichll/pi-sandbox
Sandbox Runtime-backed Linux and macOS sandbox with pi-auto-review approval
+3
extension
@xynogen/pix-gate
Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)
extension
@erichll/pi-auto-review
Model-backed boundary approval broker for Pi
+2
skillextension
@ory/pi
Ory plugin for Pi (the minimal coding agent): scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
extension
@mzwing/pi-permission-auto-review
Codex-style automatic approval reviews for @gotgenes/pi-permission-system
skilltool
oh-my-vul
Evidence-first vulnerability research skills and CLI for Pi, Codex, and Claude Code
extension
pi-tool-guard
Pi extension that corrects LLM tool calls: normalizes argument aliases for edit/write/read and strips trailing pipeline extractors from bash commands
extension
@agwab/pi-subagent
Minimal subagent runtime for Pi.
+1
skill
amber-protocol
Amber Protocol: repository-local governance kit for coding agents — install, audit, validate, and hand off agent-facing project state.
toolextension
decorated-pi
decorated-pi is a practical enhancement pack for pi coding agent — token-efficient workflow, cache-friendly design, and smarter tools.
+5
extension
pi-guard
General-purpose permission system for pi tools, handling permissions for bash and file tools with extensible matchers for custom tools.
extension
pi-dcg
Guard Pi shell commands with Destructive Command Guard.
+1
skillextension
pi-skill-shiori
Pi extension that reduces Agent Skill catalog tokens with policy-based skill retrieval and on-demand skill loading.
+1
extension
pi-streaming-guard
Keep Pi's TUI responsive during long streamed responses with incremental Markdown rendering
extension
@gotgenes/pi-permission-model-judge
Deny-first typo-path model judge — a pi-permission-system Authorizer chain link
promptextension
@diegopetrucci/pi-dirty-repo-guard
A pi extension that prompts before session changes when the current git repo has uncommitted changes.
extension
pi-fff-non-ascii-guard
Pi extension that detects and renames non-ASCII filenames before fff-core can panic on UTF-8 byte boundaries.
+1
promptextension
@d3ara1n/pi-access-denied
Sandbox write/edit/bash to the project dir — prompt / deny / allow modes, configurable deny-with-redirect rules, per-session allow-deny memory
extension
smart-approve
High-risk-only approval hook with LLM risk analysis, behavior detection, protected-path interception, and decision memory for oh-my-pi (OMP) and pi-agent.
+1
extension
@spences10/pi-confirm-destructive
Git-aware Pi guardrail that asks for confirmation before destructive shell actions can change or lose work
extension
@vanillagreen/pi-output-policy
OMP-style large-output policy for Pi tool results: minimization, bounded truncation, and spill-file preservation.
extension
@diegopetrucci/pi-agent-workflow-audit
A pi extension that runs an isolated repo workflow audit and returns only the final report to the main session.
+1
extension
@ifi/oh-pi-extensions
Core pi extensions: git-guard, auto-session, custom-footer, and more.
+5
extension
@ramtinj95/pi-infra-command-guard
Approval guard for risky infrastructure, cloud, container, repository, secret, and local file commands in Pi and GPT-5.6 Code Mode
+2
extension
pi-permission-layers
Pi extension to handle permissions using a layered approach
extension
pi-marketplace
Pi extension for searching, auditing, and installing pi packages from npm — with security review and optional pi.dev enrichment
+1
skill
@blackbelt-technology/pi-dashboard-eng-disciplines
Cross-cutting engineering-discipline skills for pi sessions — interview-me, doubt-driven-review, code-simplification, security-hardening, performance-optimization, observability-instrumentation, systematic-debugging, node-inspect-debugger, scenario-design
promptextension
@false00/cyber-news
Interactive cybersecurity news briefing for the Pi coding agent with live multi-source headlines and deep-dive story prompts
promptextension
@piotr-oles/pi-bash-timeout
Pi Agent extension: inject a default bash timeout and append timeout policy guidance to the system prompt
skilltool
@blackbelt-technology/pi-dashboard-code-review-toolkit
Code-review workflow skills for pi sessions — code-review (AI-powered review with severity labels via the CodeRabbit CLI) and autofix (safely review and apply CodeRabbit PR review-thread feedback with per-change approval). Pure-skill package, no extension
extension
@nqbao/pi-sandbox
OS-level sandbox for pi coding agent — macOS sandbox-exec / Linux bubblewrap kernel-enforced isolation
+1
extension
@monotykamary/pi-localterm
localterm <-> pi integration: Kitty graphics for the browser renderer, scrubbing localterm-managed secret env vars from the agent's bash-tool children, and OSC 9 desktop notifications when the agent finishes a long turn.
extension
@josephyoung/pi-heimdall
Guardian extension for pi — security guards that block accidental secret exposure, enforce command policies, protect .env files, and sandbox bash commands
+1
extension
pi-widget-host
Host package for managing one shared Pi widget slot across multiple providers with preset policies and a built-in demo provider.
extension
@accolver/bash-guard
Bash Guard pi extension with deterministic sensitive-command protection and LLM voting
+1
extension
pi-cwd-guard
Small Pi safety extension for cwd access, protected paths, runtime config confirmation, and common destructive bash commands.
extension
@raquezha/noleaks
Security credentials protector shield for the Pi Coding Agent — blocks LLM access to .env, keys, and secrets
extension
pi-redact-all
Global tool-output redaction for Pi — redacts secrets, certificates, PII, and connection strings across all tools before they reach the model.
extension
@firstpick/pi-extension-safety-guard
Interactive guardrails for dangerous bash commands and protected file edits in Pi.