Packages

6.2k listings for pi

🛡 Guards & policy Block or rewrite dangerous tool calls, sandbox commands, enforce permissions.

323 results · page 5 of 7

skillextension

@awsljx/pi-hermes-memory

🧠 Persistent memory + 🔍 session search + 🛡️ secret scanning for Pi. Token-aware policy-only memory by default, SQLite FTS5 search, auto-consolidation, procedural skills. 368 tests. Ported from Hermes agent.

🤖⚡📁🔧 +1
awsljx ↓ 92
extension

pi-sdd-stack

PRD-first SDD stack for Pi Agent with OpenSpec and strict Engram memory policy.

🤖⚡📁⇄ +2
pablognu ↓ 91
extension

@igormaka/pi-sandbox

A proper sandbox extension for pi, using the Anthropic Sandbox Runtime

🤖⚡📁⇄ +2
igormaka ↓ 91
extension

pi-permission

Layered permission control extension for pi-coding-agent (no sound)

⚡📁⇄▤
kmulliken ↓ 90
extension

pi-redteam

Multi-agent red teaming system for Pi - 10 specialized security agents for vulnerability assessment and penetration testing

🤖📡⇄🔀 +2
jtregunna ↓ 89
prompt

@kassing/pi-menu

Interactive menus & input for pi — proactive multi-question tabs, option search filter, single/multi select, typed input (text/secret/number/date/path), configurable emoji

🤖📁🔧▤
kassing ↓ 88
extension

pi-permission-suite

Four approval modes + command-level security restrictions for the Pi coding agent. Act / Auto / Ask / Plan mode switching, rule engine, subagent auto-approval.

🤖⚡📁⇄ +2
eddie0521 ↓ 87
extension

pi-quick-perms

Permission enforcement and quick policy commands for the Pi coding agent.

🤖⚡📁⇄ +2
GitHub Actions ↓ 87
extension

@rhedbull/pi-permissions

Claude Code-style permission modes for pi. Controls approval for file writes, edits, and bash commands with four modes: default, acceptEdits, fullAuto, and bypassPermissions.

📁⇄▤
rhedbull ↓ 86
skillextension

pi-agent-booster-pack

Agent Booster Pack helps Pi produce code that is well-organized, low in complexity and side effects, and is secure and high-performing.

kreek ↓ 85
extension

@xaccefy/pi-engage

Authenticated-session manager for Pi Agent — store and resolve cookie, OAuth client-credentials, and mTLS auth for authorized pentest targets

⚡🔑📁🌐 +2
xaccefy ↓ 81
extension

pi-permissions

Configurable allow/deny permission rules for pi tool calls — control which bash commands, file reads, writes, and edits the agent can perform.

📁⇄▤
GitHub Actions ↓ 77
extension

@the-forge-flow/security-harness-pi

Security harness for the PI coding agent — forbids dangerous commands and gates sensitive ones behind user approval

⚡📁⇄▤
the-forge-flow-ai ↓ 74
extension

pi-guard-sandbox

A lightweight OS-level guard for Pi: agents stay useful, sensitive paths stay blocked, and writes stay inside the workspace you allow. No container overhead. No workflow drama.

⚡📁⇄🌐 +2
runminton ↓ 73
skill

@firstpick/pi-skill-code-security

Agents should invoke this skill for code security reviews, leaked secret checks, dependency risk, unsafe shell/Python/TypeScript/Rust patterns, auth/input-validation flaws, SAST-style audits, or supply-chain concerns in repositories.

firstpick ↓ 73
extension

@isr4el-silv4/loop-guard

Pi extension that detects and prevents LLM loops in tool calls and reasoning

🤖⇄▤
isr4el-silv4 ↓ 73
promptextension

@agentoom/pi-spending-guard

Track LLM spending per task and pause when a configurable threshold is reached — continue, refine the prompt, or stop. Pi extension by agentoom.com.

🤖📁⇄▤
agentoom ↓ 71
extension

@pandi-coding-agent/pandi-container

Extensión de Pi para administrar sandboxes de Apple `container` (micro-VMs Linux): un comando /container y una herramienta container_sandbox invocable por el modelo (status/list/create/run/stop/remove).

⚡🔧▤
andrestobelem ↓ 70
extension

pi-posher

Helps clankers keep code prim and proper with linters, formatters and security tools

🤖⚡📁⇄ +2
jeffphil ↓ 70
extension

@vtstech/pi-security

Security extension for Pi Coding Agent

🤖📁⇄🔧 +1
vtstech ↓ 70
extension

@artale/pi-pentest

Security scanning: nmap wrapper, vulnerability checks

⚡
artale ↓ 70
extension

pi-agent-review

A pi coding-agent extension that reviews every tool call and tool output with an LLM reviewer, hard-denies secret access, and gates risky actions behind user approval.

🔑📁⇄🌐 +2
ejmorgan ↓ 69
extension

@4meta5/pi-zsh

Allowlist-only zsh script runner extension for pi coding agents.

⚡📁🔧▤
4meta5 ↓ 69
extension

@jc4649/pi-toolcall-guard

Deterministic tool-call guard for pi: path preflight, schema/repair, content rules, error enrichment, and destructive-bash blocking (interactive confirm + headless subagent hard-block)

🤖📁⇄▤
jimmyc4649 ↓ 66
tool

hyperresearch-pi

Deep research harness for pi — tier-adaptive 16-step pipeline with adversarial audit, source provenance, and a persistent searchable vault. Wraps the hyperresearch Python CLI.

🤖⚡📁⇄ +3
gongsunyuan ↓ 66
extension

@biratkk/pi-trust-policy

Bash command allowlist system for pi — grouped trust policies with glob matching, recursive parsing, and an interactive TUI manager

📁⇄▤
biratkk ↓ 65
extension

@codingcoffee/pi-readonly-ssh

a pi extension for safely running allow-listed, read-only commands on remote hosts over SSH

⚡📁🔀🔧 +1
codingcoffee ↓ 65
extension

@uiyzzi/pi-shroud

High-performance secret firewall for pi — secrets usable as shell vars, never visible to models

🤖📁⇄▤
GitHub Actions ↓ 65
toolextension

whisper-pi

Native Pi extension: give a Pi coding agent a real, routable Whisper IPv6 /128 identity - keyless verify/RDAP; the full control plane, /128 egress, and the whisper.security graph (Cypher + 29 recipes) with a key.

🔧
kakooch ↓ 64
extension

executor-pi

`executor-pi` is a first-class Pi extension for running Executor from inside Pi with native approval, elicitation, rendering, and project-aware Executor configuration.

📁🔧▤
aryasaatvik ↓ 63
extension

pi-herdr-sudo-task

Blocking, user-approved sudo tasks in a dedicated Herdr pane

⚡📁🔧▤
GitHub Actions ↓ 62
extension

@nklisch/pi-clearance

Configurable auto-reviewer Pi extension for parsed, structural command policy

🤖🔑📁⇄ +4
nklisch ↓ 62
extension

@0xkobold/pi-secret-guardian

Secret detection and pi-share-hf integration for pi-coding-agent. Scans projects, sessions, and environment for secrets, syncs to pi-share-hf workspace, and manages the collection/upload pipeline.

🤖⚡📁⇄ +2
moikapy ↓ 59
extension

@asqav/pi

Asqav extension for the pi coding agent - sign and gate tool calls before they execute

🔑⇄
jagmarques ↓ 57
promptextension

@foxfirecodes/pi-sandbox

OS-level sandboxing for pi with interactive permission prompts (fork)

⚡📁⇄🔧 +1
foxfirecodes ↓ 57
extension

@clankie/sandbox

Gondolin micro-VM sandbox for clankie — runs agent tools inside an isolated VM with network policies, secret injection, and filesystem isolation

🤖📁⇄🔧 +1
thiagovarela ↓ 56
extension

@grwnd/pi-governance

Governance, RBAC, audit, and HITL for Pi-based coding agents

⚡📁⇄🌐 +1
dt-grwnd ↓ 55
extension

pi-yolo-bypass

Dynamic full-permission bypass toggle for pi-permission-system with backup/restore of policy files.

📁▤
skyscribe ↓ 55
extension

pi-seatbelt-sandbox

macOS Seatbelt sandbox extension package for pi bash and file-tool access controls.

⚡📁⇄🔧 +1
thaodangspace ↓ 54
extension

@shelken/pi-defender

Defense-in-depth protection for Pi coding agent. Blocks dangerous commands and protects sensitive files — fork of Serhioromano/pi-defender with defaultMode support.

📁⇄▤
shelken ↓ 54
promptextension

@danypops/pi-profiles

Named profiles for pi: bundle model, thinking level, tools, and system-prompt instructions, with a soft model-allowlist guard for separating contexts like a personal OpenRouter budget from a work Vertex AI project.

🤖📁🔀▤
danypops ↓ 52
extension

@self-deprecated/pi-agent-tick

Agent Tick control-plane integration for Pi: remote decisions, approvals, and session status updates

📡🔑📁⌨ +3
jeprecated ↓ 52
extension

pi-root-grant

Pi extension that lets agents request temporary sudo-backed root access with explicit user approval.

⚡📁🔧▤
faithless ↓ 52
extension

@codingcoffee/pi-privacy-filter

pi extension that redacts PII/secrets before sending to the LLM and restores them in responses

🤖▤
codingcoffee ↓ 52
extension

@davehardy20/pi-safe-tools

Pi safety bundle: safe command runners, damage prevention, and secret redaction.

🤖⚡📁⇄ +2
davehardy20 ↓ 52