@xaccefy/pi-webxp

Web search, page fetch, library docs, repo Q&A, and exploit technique search for Pi Agent

Packages

Package details

extension

Install @xaccefy/pi-webxp from npm and Pi will load the resources declared by the package manifest.

npm repohome report
$ pi install npm:@xaccefy/pi-webxp
Package
@xaccefy/pi-webxp
Version
0.10.0
Published
Aug 26, 2026
Downloads
2,948/mo · 95/wk
Author
xaccefy
License
MIT
Types
extension
Size
89 KB
Dependencies
4 dependencies · 4 peers
Pi manifest JSON
{
  "extensions": [
    "./src/index.ts"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

pi-webxp

Web research + offensive HTTP transport for the Pi agent.

npm License: MIT

What it is

Two things in one package, deliberately:

Research — ground the agent in reality instead of its training data: web_search, web_fetch, deepwiki (repo/library docs), exploit_search (exploit-technique lookup; needs PREVIEW_IS_API_KEY)

Transport — byte-exact attack primitives for classes where ordinary HTTP clients lie: raw_request (byte-exact smuggling/desync probes), race_send (last-byte-sync batch-release racing), http_request (general purpose)

Network safety gates (network-safety.ts) scope what targets the transport tools will touch.

Works for human + AI workflows: you point it at an authorized target, it does the legwork — no autonomy layer included or wanted.

Install

pi install npm:@xaccefy/pi-webxp

Peer-depends on a Pi-compatible agent host (@earendil-works/pi-coding-agent, pi-ai, pi-tui, typebox). Runtime deps: @xaccefy/pi-shared, open-websearch, tough-cookie, undici.

Development

bun install
bun test --isolate   # 61 tests
bun run typecheck

License

MIT