Please report security issues privately via GitHub Security Advisories for this repository:

https://github.com/smarzban/pi-extensions/security/advisories/new

Do not open a public issue for vulnerabilities.

This monorepo ships pi extensions that run with the same privileges as pi itself (full local access). Review extension source before installing third-party packages. See pi’s own security guidance for the agent runtime.

• pi-pacman: UI only. No tools, no network, no repo writes (except its own state file in the pi agent dir).
• pi-statusline: UI only; runs read-only git and gh subprocesses. Its provider-quota feature is opt-in and off by default: only after /statusline usage on does it read ~/.pi/agent/auth.json (and ~/.codex/auth.json) and send the provider token to that provider's usage API (currently Codex, at chatgpt.com). With usage off, no auth files are read and no network calls are made.