cc-safety-net
A coding agent CLI hook - block destructive commands and secret file access
$ pi install npm:cc-safety-netPackage Catalog
Extensions, skills, prompt templates, and themes published to npm. Install with pi install npm:<package>. See the package docs for details.
Recently published
@aibyzero/cm-workflowSpec-driven business development workflow for Pi, Codex, and Claude Code3m agoagent-commsCross-harness communication mesh for LLM agents — rooms, DMs, presence, and real-time push delivery over TCP9m ago@blackbelt-technology/pi-flowsFlow engine, dashboard, and orchestration extensions for pi11m agopi-atelierA responsive status rail and live activity sidebar for Pi11m ago@mdgchamomile/pi-subagentRun bounded, read-only Pi subagents without filling the parent context with intermediate investigation output12m agocc-safety-netA coding agent CLI hook - block destructive commands and secret file access12m ago@cr1ms0n/pi-subagentCommunity fork of Luke Parke's pi-subagent with Jev model/tool routing and verified Pi child capabilities13m ago@awebai/oats-piOATS pi runtime bridge — memory session events and pre-workspace bootstrap over the runtime-neutral @awebai/oats kernel15m ago
All packages
1-50 / 56 (of 5383)
@cad0p/pi-steering
AST-backed steering hooks for pi — deterministic tool-call guardrails with command-level effective-cwd scoping.
$ pi install npm:@cad0p/pi-steeringpi-smart-compact
Verification-oriented smart compaction extension for Pi Coding Agent — deterministic extraction, exploration, synthesis, verification, metrics, and safety checks.
$ pi install npm:pi-smart-compact@hank-warren/pi-auto-permissions
Fork of @ogulcancelik/pi-auto-permissions with dialog-answer user evidence: context-aware Bash permissions for Pi with automated guardian review.
$ pi install npm:@hank-warren/pi-auto-permissions@yaosu/pi-path-guard
Path Guard for pi — blocks destructive commands & path overwrites, protects .env/keys, with strict/normal/loose/trusted/naked guard modes (/guard). pi 防误删/防误覆盖扩展，支持 5 种防护模式。
$ pi install npm:@yaosu/pi-path-guard@agentapprove/pi
Agent Approve extension for Pi - approve or deny AI agent tool calls from your iPhone and Apple Watch
$ pi install npm:@agentapprove/pipi-workspace-history
Real workspace undo/redo for Pi. Bring Claude Code style /rewind and OpenCode /undo safety to @earendil-works/pi-coding-agent.
$ pi install npm:pi-workspace-historypi-typesafe
TypeSafe AI (Jev) decisions for Pi: batched Choice/Score/Noul evaluation tool, terminal playground, and a typed API other extensions build on.
$ pi install npm:pi-typesafe@senad-d/guardme
Deny-first Pi guardrails that keep LLM shell and file access safe, transparent, and user-approved.
$ pi install npm:@senad-d/guardmezob-harness
A governed Agent Factory for Pi: launch communicating agent teams, run tmux-backed factories, validate artifacts, and package repeatable workflows.
$ pi install npm:zob-harnesspi-ast-guard
基于 AST 的 Pi 代理安全防护扩展 — 解析 Bash 命令，拦截危险操作（继承自 pi-damage-control）
$ pi install npm:pi-ast-guardpi-multi-orchestrator
Pi control center for bounded 9Router model, pool, mission, quality, analytics, and safety workflows
$ pi install npm:pi-multi-orchestrator@evoclock/pi-agentic-driver
Guardrail extensions for Agentic Driver: advisory review, bounded Herdr communication, and guarded worker lifecycle.
$ pi install npm:@evoclock/pi-agentic-driver@cad0p/pi-steering-flags
Declarative flag-presence and flag-allowlist predicates for pi-steering rules. First official external plugin.
$ pi install npm:@cad0p/pi-steering-flags@everyx/pi-ui
Shared TUI building blocks for pi extensions — spinner, card, status widget, view, ticker, context stash, width safety, preview runtime.
$ pi install npm:@everyx/pi-uipi-agent-foreman
Send Pi agents back to work when they stop before the job is done.
$ pi install npm:pi-agent-foreman@diegopetrucci/pi-extensions
A collection of pi extensions and skills for annotation UIs, context management, workflow audits, contrarian review, review-comment triage, notifications, brrr push alerts, safety guards, GitHub research, repo-local knowledge, todos, tool rendering, model
$ pi install npm:@diegopetrucci/pi-extensions@cad0p/pi-napkin
📜 Napkin integration for pi — vault context, knowledge tools, and automatic distillation with git-worktree concurrency safety
$ pi install npm:@cad0p/pi-napkin@johansja/pi-permission-gate
LLM-powered safety gate for pi: classifies bash and MCP tool calls by risk before execution, with CWD-aware judgments.
$ pi install npm:@johansja/pi-permission-gate@j1nn0/pi-input-lock
Automatically locks Pi's interactive input while an agent is running.
$ pi install npm:@j1nn0/pi-input-lock@pify/yolo
One toggle to auto-approve everything, with an undo trail: three-tier bash guard, file pre-images, fail-closed everywhere
$ pi install npm:@pify/yolopi-loop-police
Pi extension: detects and interrupts infinite thinking-block and tool-call loops in real time before they exhaust your context window.
$ pi install npm:pi-loop-police@pify/goal
Pin a session goal and keep the agent anchored to it: settled-idle continuation, safety limits, evidence-gated completion
$ pi install npm:@pify/goal@firstpick/pi-extension-safety-guard
Interactive guardrails for dangerous bash commands and protected file edits in Pi.
$ pi install npm:@firstpick/pi-extension-safety-guard@vanillagreen/pi-hooks
The carrier that runs kendex's hooks under Pi: it dispatches the rendered kendex/hooks.json registry on every listener kendex maps a hook event onto, so a PreToolUse, PostToolUse, Stop, TaskCompleted or SessionStart hook fires, the bash guards kendex rend
$ pi install npm:@vanillagreen/pi-hooks@diegopetrucci/pi-dirty-repo-guard
A pi extension that prompts before session changes when the current git repo has uncommitted changes.
$ pi install npm:@diegopetrucci/pi-dirty-repo-guardpi-safety-guards
Configurable Bash safety rules with per-rule actions and custom matchers for Pi
$ pi install npm:pi-safety-guards@floydous/pi-agent-kernel
Focused code retrieval, editing, safety checks, and language-server support for Pi.
$ pi install npm:@floydous/pi-agent-kernel@diegopetrucci/pi-permission-gate
A pi extension that prompts before dangerous shell commands and protected file writes.
$ pi install npm:@diegopetrucci/pi-permission-gate@diegopetrucci/pi-confirm-destructive
A pi extension that confirms destructive session actions.
$ pi install npm:@diegopetrucci/pi-confirm-destructive@pify/worktree
Safe git-worktree management for pi: create/list/merge/remove with safety rails, no shell interpolation, Windows-first, zero tmux
$ pi install npm:@pify/worktree@spences10/pi-confirm-destructive
Git-aware Pi guardrail that asks for confirmation before destructive shell actions can change or lose work
$ pi install npm:@spences10/pi-confirm-destructive@tryinget/pi-evalset-lab
pi extension for fixed-task-set eval runs and prompt/system comparisons
$ pi install npm:@tryinget/pi-evalset-lab@bacnh85/pi-windows-tools
Pi extension for Windows-native tool manipulation — shell profiles, path conversion, command execution, WSL bridge, safety policy, and developer tool discovery.
$ pi install npm:@bacnh85/pi-windows-toolspi-edit-approval
Pi extension: confirm before write/edit with profiles, diff preview, and persistent allow/deny memory. Reads always allowed.
$ pi install npm:pi-edit-approval@ogulcancelik/pi-auto-permissions
Context-aware Bash permissions for Pi with automated guardian review.
$ pi install npm:@ogulcancelik/pi-auto-permissionspi-git-safeguard
pi extension: gate git/gh write operations (commit, push, PRs, and more) behind interactive user approval.
$ pi install npm:pi-git-safeguard@nilskluewer/pi-auto-permission-gate
Confirm or block dangerous bash commands before the Pi coding agent executes them.
$ pi install npm:@nilskluewer/pi-auto-permission-gate@cad0p/pi-steering-commit-format
Commit-message format validation predicates for pi-steering. Bundled formats: Conventional Commits 1.0.0 (Angular preset type allowlist), bracketed JIRA-style ticket references. Extensible via `commitFormatFactory`.
$ pi install npm:@cad0p/pi-steering-commit-formatpi-supersafety
When the example safety extensions don't cover what you need, this should! Simple with approval flow and windows sandbox capability (with Sandboxie)
$ pi install npm:pi-supersafetysmart-approve
High-risk-only approval hook with LLM risk analysis, behavior detection, protected-path interception, and decision memory for oh-my-pi (OMP) and pi-agent.
$ pi install npm:smart-approvepi-safety-net
Fail-open fork of cc-safety-net — blocks destructive git/filesystem commands, but defaults to fail-OPEN on broken/legacy config so the shell never bricks.
$ pi install npm:pi-safety-netpi-opa-net
OPA-backed bash command guard for the pi ecosystem — structured decision-output.v1 JSON, fail-open default, Claude Code hook protocol compatible. Agent-agnostic engine + CLI.
$ pi install npm:pi-opa-net@zenspc/pi-safety
Confirm destructive bash and git actions before Pi runs them
$ pi install npm:@zenspc/pi-safety@giuseppe.trisciuoglio/pi-prevent-destructive-commands
Unconditionally blocks destructive bash commands before execution. A pi extension that guards against rm, git reset --hard, docker rm, aws delete operations, and more.
$ pi install npm:@giuseppe.trisciuoglio/pi-prevent-destructive-commands@spences10/pi-sqlite-tools
SQLite safety workflow reminder that steers Pi agents to use gated mcp-sqlite-tools instead of raw sqlite3
$ pi install npm:@spences10/pi-sqlite-toolspi-delete-session
Powerful session deletion tool for Pi. Delete multiple sessions at once, grouped by project, with safety confirmations.
$ pi install npm:pi-delete-session