extension
@spences10/pi-nopeek
Secret-safe workflow reminder that steers Pi agents to use nopeek instead of exposing .env values
Packages
6.2k listings for pi
🛡 Guards & policy Block or rewrite dangerous tool calls, sandbox commands, enforce permissions.
286 results · page 1 of 6
extension
pi-mono-sentinel
Pi extension that guards against content-based secret leaks and indirect script execution
extension
pi-mono-context-guard
Pi extension that guards context window growth by auto-limiting read and rg output
+1
promptextension
@diegopetrucci/pi-permission-gate
A pi extension that prompts before dangerous bash commands and protected file writes.
extension
pi-agentkernel
Route Pi coding agent commands through agentkernel microVM sandboxes
+2
extension
@upstash/box-pi
Pi coding agent extension that runs all tool calls inside a remote Upstash Box sandbox while the agent runs locally
+2
toolextension
@boozedog/pi-codemode
Pi Codemode plugin - TypeScript code execution with sandboxed tools, just-bash shell, and MCP integration
+3
extension
pi-show-diffs
Pi package that adds a diff approval viewer before edit and write tools change files.
+1
extension
@yevhen.b/pi-preflight
Tool-call approvals and policy rules for Pi.
+2
skilltool
pi-daytona
A pi extension that runs tools inside a Daytona cloud sandbox for safe, isolated execution. v0.0.2 — per-session sandbox state supports concurrent sessions; skill files read locally first.
+2
extension
pi-protected-paths
Blocks write/edit/read of sensitive files (.env, .git, node_modules, SSH keys, credentials, and more)
extension
pi-thegreataxios-staples
Personal staple extension for pi coding-agent — protected paths
extension
@pi-lab/permissions
Permission system extension for pi coding agent
toolextension
pi-codex-security
Pi extension for OpenAI Codex Security — scan repositories for vulnerabilities, review findings, and fix them with the pi agent
toolextension
pi-casefile
Offensive security case tracker for pi and Codex — bug bounties, CTFs, security audits
+2
extension
pi-bash-readonly
Sandboxed read-only bash for Pi agents via bwrap
+1
extension
@a5c-ai/babysitter-pi
Orchestrate complex, multi-step workflows with event-sourced state management, hook-based extensibility, and human-in-the-loop approval — pi
extension
pi-deepseek-cache
DeepSeek prefix-cache extension for pi — hit-rate telemetry, prefix guard, and cache-friendly compaction.
+2
toolextension
@m4riok/pi-ide-bridge
Pi extension for VS Code diff approval workflows and editor context bridging.
+4
extension
pi-sensitive-guard
Pi extension that protects sensitive files, blocks secret writes, and optionally redacts protected read output.
+1
extension
@alexleekt/pi-pkg-guard
Don't let orphaned packages clutter your agent. Guard against unregistered pi packages.
extension
@thurstonsand/pi-permissions
Pi extension package for user, project, and package-level tool permission hooks
+1
extension
@0xkobold/pi-whitelist
Tri-state tool permission system (allow/deny/ask) for AI agent tool invocations
extension
@senad-d/protectme
Pi extension that guards agent network and website access with global and project allow lists.
+1
extension
@jerryan/pi-bash-wrap
Sandbox pi bash commands with bubblewrap
+1
extension
@liziy/plan-guard
Tab 键切换计划/执行模式
skillextension
agent-booster-pack-skills
General Agent Booster Pack skills for Pi: data, security, debugging, refactoring, and more. Runtime-owned skills ship with their matching extension packages. Renamed from pi-agent-booster-pack; old name deprecated.
extension
@aprimediet/permission-modes
A Claude-Code-style **Shift+Tab mode cycle** for the [pi coding agent](https://pi.dev).
+2
extension
@dihak/pix-gate
Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)
skillextension
agent-booster-pack-contract-first
Interface Design Gate for Pi plus contract-first skill: pause and require human approval of contract/API shape before implementation lands.
extension
pi-claude-permissions
Claude-style allow/deny/ask permission lists for Pi tool calls
extension
pi-tool-wal
Write-ahead log for Pi tool calls: record intent before execution, reconcile results after, persist to SQLite for audit and crash recovery
extension
@grothesque/sandburg
Pi sandbox balancing security, usability and agent autonomy; for Linux
+3
extension
pi-opa
Enterprise-grade Open Policy Agent (OPA) integration for pi coding agent - comprehensive authorization, authentication, and policy enforcement
+2
extension
@giuseppe.trisciuoglio/pi-prevent-destructive-commands
Unconditionally blocks destructive bash commands before execution. A pi extension that guards against rm, git reset --hard, docker rm, aws delete operations, and more.
extension
@akshaykarle/pi-tools
Pi coding agent extensions — security hardening, agent teams and more
+7
extension
@yoseph_23/implannotator
Approval-gated frontend implementation for Pi, combining Implannotator design guidance with Plannotator reviews.
+3
extension
pi-focus-guard
Pi extension that groups discuss, write, and commit guards under focus-prefixed commands.
toolextension
pi-agent-permissions
Pi CLI extension — configurable permission policy from .agents/permissions.json and native agent configs
extension
@komarspn/pi-permission-system
Permission enforcement extension for the Pi coding agent.
+2
extension
pi-autonomy-profiles
Standalone Auto Mode commands, permission modes, and guardrails for Pi
toolextension
pi-perms
Pi CLI extension — configurable permission policy from .agents/permissions.json and native agent configs
extension
@4meta5/pi-ozcar
Pi-first audit extension package for structured security reviews and deterministic comparison exports
extension
pi-permissive
A deliberately permissive permission gate for the Pi coding agent — blocks only destructive commands, never nags.
extension
@bytesbrains/pi-agent-supervisor
Runtime safety net for AI agents — blocks dangerous commands, protects files, enforces rate limits, and records sessions.
extension
pi-switch-model
Free-form, LLM-driven model switching for Pi — resolve a free-text model reference and switch mid-conversation, no approval loop, no auto-restore
skillextension
@haemmid/pi-skill-paths
Canonical SKILL.md path correction and bash skill-access guard for Pi.
extension
@ikuradon/pi-guardian
Codex-style sandbox boundary guardian gate for pi-coding-agent.
+1