pi-audit

Security review and compliance audit extension for Pi coding agents

Packages

Package details

extension

Install pi-audit from npm and Pi will load the resources declared by the package manifest.

npm repohome report
$ pi install npm:pi-audit
Package
pi-audit
Version
0.4.17
Published
May 15, 2026
Downloads
not available
Author
bom0792
License
MIT
Types
extension
Size
206.4 KB
Dependencies
1 dependency · 2 peers
Pi manifest JSON
{
  "extensions": [
    "./index.ts"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

pi-audit

Security review and compliance audit extension for Pi coding agents. Provides multi-perspective code review with automated vulnerability detection.

Features

  • Five-Axis Review - Security, Performance, Maintainability, Testing, Documentation
  • OWASP Audit - Automated vulnerability detection based on OWASP Top 10
  • AgentShield - Protection against prompt injection and malicious instructions
  • CompletionMutationGuard - Mutation detection for secure completion
  • Diff Analysis - Multi-perspective code review with diff scoping

Install

pi install npm:pi-audit

Quick Start

Run Full Security Review

/review

Review Changes in PR

/review diff --base=main --head=feature-branch

Security-Focused Review

/review security

Generate Report

/review report --format=markdown --groupBy=severity

Commands

Command Description
/review Run full multi-perspective review
/review security Security-focused review
/review performance Performance-focused review
/review diff Review git diff
/review file <path> Review specific file
/review report Generate summary report

Review Perspectives

The extension reviews code across 6 perspectives:

  1. Security - Vulnerability detection, OWASP Top 10
  2. Performance - Resource usage, algorithmic efficiency
  3. Maintainability - Code complexity, duplication
  4. Testing - Test coverage, edge cases
  5. Documentation - Comments, README, API docs
  6. Production Readiness - Error handling, logging, monitoring

Configuration

Review Configuration

// In your agent config
{
  "review": {
    "perspectives": ["security", "performance"],
    "maxFiles": 50,
    "severity": ["critical", "high", "medium"]
  }
}

Verify

pi list

License

MIT