🌐 Safety Guard: Network & Exfiltration Prevention

Prevents data exfiltration, remote code execution, and unauthorized network operations.

What it protects against

🔴 Hard-blocked (always, no override)

Piped remote code execution

Pattern	Why
curl … | sh/bash/zsh	Executes untrusted remote code
wget … | sh/bash/zsh	Same via wget
curl … | sudo sh	Remote code as root
bash <(curl …)	Process substitution variant
bash -c "$(curl …)"	Command substitution variant

Secrets in commands

Pattern	Why
curl -H "Authorization: Bearer <long-token>"	Leaking API tokens in commands
curl -d "password=…" / secret=… / api_key=…	Sending credentials in POST data
curl/scp/rsync … .env / .pem / .key / id_rsa	Uploading secret files
curl …?token=<long-value>&…	Secrets in query parameters

Exfiltration via file writes

The extension also scans the write tool's content for piped shell patterns, preventing scripts that would curl | sh from being saved to disk.

🟡 Confirmation required

Data upload

Pattern	Why
curl -X POST/PUT/PATCH/DELETE	Sending data to external servers
curl -d … / --data … / -F …	Uploading data via curl
wget --post-data/--post-file	Uploading data via wget

File transfer

Pattern	Why
scp … user@host:	Copying files to remote server
rsync … user@host:	Syncing files to remote server
nc / netcat / ncat	Raw network socket access
ssh -L/-R/-D	SSH tunneling (potential exfil channel)

Package publishing (irreversible)

Pattern	Why
npm publish	Publishes package to npm registry
cargo publish	Publishes crate to crates.io
gem push	Publishes gem to RubyGems
pip upload	Uploads to PyPI
docker push	Pushes image to container registry

Behavior

Mode	Action
Interactive — hard-block	Notifies user, blocks with explanation
Interactive — confirm	Shows dialog with command preview
Non-interactive	All flagged operations blocked

Status bar

Shows 🌐 net-guard in the footer when active.

Installation

Already active — lives in ~/.pi/agent/extensions/safety-network-exfiltration/index.ts and auto-loads with every pi session.

Example — piped execution (blocked)

🚫 Blocked: piped remote code execution

Remote code execution via piped shell is never allowed.
Download the script first, review it, then run it.

Example — data upload (confirmation)

🌐 Network: curl POST/PUT/PATCH/DELETE
  curl -X POST https://api.example.com/data -d '{"key": "value"}'

  This command sends data over the network. Allow?

  [Yes]  [No]