cc-safety-net
A coding agent CLI hook - block destructive commands and secret file access
$ pi install npm:cc-safety-netPackage Catalog
Extensions, skills, prompt templates, and themes published to npm. Install with pi install npm:<package>. See the package docs for details.
Recently published
pi-codex-compactionKeep Pi sessions flowing with automatic server-side compaction on public OpenAI Responses.25m ago@companion-ai/feynmanResearch-first CLI agent built on Pi and alphaXiv30m agoopenwikiA CLI that uses a DeepAgents documentation agent to generate and maintain an OpenWiki for a codebase.30m agopi-openai-reasoningChange Codex reasoning effort without rewriting the cached request prefix.41m agopi-spacexaiGrok Imagine, TTS/STT, Ctrl+Space streaming push-to-talk, a realtime voice sidebar, and auto-speak for pi — uses built-in xAI OAuth from auth.json43m ago@cratis/piConfiguration-aware Cratis AI integration for Pi44m agopi-fastToggle provider fast modes in Pi on demand.47m agopi-codex-toolsCodex-compatible apply_patch tooling for Pi's grammar-capable OpenAI models.48m ago
All packages
1-50 / 61 (of 5384)
pi-typesafe
TypeSafe AI (Jev) decisions for Pi: batched Choice/Score/Noul evaluation tool, terminal playground, and a typed API other extensions build on.
$ pi install npm:pi-typesafe@agentapprove/pi
Agent Approve extension for Pi - approve or deny AI agent tool calls from your iPhone and Apple Watch
$ pi install npm:@agentapprove/pi@openlines/opl-pi-sht
opl-pi-sht (shouldHaveThat) Pi coding-agent extension kit: token-efficient context, tool and session safety, fingerprinted /init, model benchmarking, web access, and browser automation.
$ pi install npm:@openlines/opl-pi-sht@pify/yolo
A safety gradient from auto-approve-everything to ask-about-anything: four modes, read-before-write, undo trail, rewind to before a prompt
$ pi install npm:@pify/yolopi-agent-foreman
Send Pi agents back to do announced or explicitly unfinished work.
$ pi install npm:pi-agent-foreman@evoclock/pi-agentic-driver
Guardrail extensions for Agentic Driver: advisory review, bounded Herdr communication, and guarded worker lifecycle.
$ pi install npm:@evoclock/pi-agentic-driver@diegopetrucci/pi-extensions
A collection of pi extensions and skills for annotation UIs, context management, workflow audits, contrarian review, review-comment triage, notifications, brrr push alerts, safety guards, GitHub research, repo-local knowledge, todos, tool rendering, model
$ pi install npm:@diegopetrucci/pi-extensions@pify/goal
Pin a session goal and keep the agent anchored to it: settled-idle continuation, safety limits, evidence-gated completion
$ pi install npm:@pify/goal@senad-d/guardme
Deny-first Pi guardrails that keep LLM shell and file access safe, transparent, and user-approved.
$ pi install npm:@senad-d/guardme@yaosu/pi-path-guard
Path Guard for pi — blocks destructive commands & path overwrites, protects .env/keys, with strict/normal/loose/trusted/naked guard modes (/guard). pi 防误删/防误覆盖扩展，支持 5 种防护模式。
$ pi install npm:@yaosu/pi-path-guard@floydous/pi-agent-kernel
Focused code retrieval, editing, safety checks, and language-server support for Pi.
$ pi install npm:@floydous/pi-agent-kernelzob-harness
A governed Agent Factory for Pi: launch communicating agent teams, run tmux-backed factories, validate artifacts, and package repeatable workflows.
$ pi install npm:zob-harnesspi-ast-guard
基于 AST 的 Pi 代理安全防护扩展 — 解析 Bash 命令，拦截危险操作（继承自 pi-damage-control）
$ pi install npm:pi-ast-guard@pify/worktree
Safe git-worktree management for pi: create/list/merge/remove with safety rails, no shell interpolation, Windows-first, zero tmux
$ pi install npm:@pify/worktree@vanillagreen/pi-hooks
The carrier that runs kendex's hooks under Pi: it dispatches the rendered kendex/hooks.json registry on every listener kendex maps a hook event onto, so a PreToolUse, PostToolUse, Stop, TaskCompleted, StopFailure, SessionStart or SessionEnd hook fires, th
$ pi install npm:@vanillagreen/pi-hooks@firstpick/pi-extension-safety-guard
Interactive guardrails for dangerous bash commands and protected file edits in Pi.
$ pi install npm:@firstpick/pi-extension-safety-guard@bacnh85/pi-windows-tools
Pi extension for Windows-native tool manipulation — shell profiles, path conversion, command execution, WSL bridge, safety policy, and developer tool discovery.
$ pi install npm:@bacnh85/pi-windows-tools@clementprevot/pi-blast-radius-guard
Pi extension that intercepts git push commands that look like accidents (protected branch targets, oversized diffs) and asks the user first
$ pi install npm:@clementprevot/pi-blast-radius-guard@cad0p/pi-steering
AST-backed steering hooks for pi — deterministic tool-call guardrails with command-level effective-cwd scoping.
$ pi install npm:@cad0p/pi-steering@hank-warren/pi-auto-permissions
Fork of @ogulcancelik/pi-auto-permissions with dialog-answer user evidence: context-aware Bash permissions for Pi with automated guardian review.
$ pi install npm:@hank-warren/pi-auto-permissionspi-loop-police
Pi extension: detects and interrupts infinite thinking-block and tool-call loops in real time before they exhaust your context window.
$ pi install npm:pi-loop-policepi-safety-guards
Configurable Bash safety rules with per-rule actions and custom matchers for Pi
$ pi install npm:pi-safety-guards@j1nn0/pi-input-lock
Automatically locks Pi's interactive input while an agent is running.
$ pi install npm:@j1nn0/pi-input-lock@johansja/pi-permission-gate
LLM-powered safety gate for pi: classifies bash and MCP tool calls by risk before execution, with CWD-aware judgments.
$ pi install npm:@johansja/pi-permission-gate@nilskluewer/pi-auto-permission-gate
Confirm or block dangerous bash commands before the Pi coding agent executes them.
$ pi install npm:@nilskluewer/pi-auto-permission-gate@cad0p/pi-napkin
📜 Napkin integration for pi — vault context, knowledge tools, and automatic distillation with git-worktree concurrency safety
$ pi install npm:@cad0p/pi-napkin@everyx/pi-ui
Shared TUI building blocks for pi extensions — spinner, card, status widget, view, ticker, context stash, width safety, preview runtime.
$ pi install npm:@everyx/pi-ui@evoclock/pi-typesafe-secure
Hardened TypeSafe skill and shared redaction library for Pi.
$ pi install npm:@evoclock/pi-typesafe-securepi-macos-computer-use
AX-first macOS computer use for pi: accessibility snapshots with stable refs, background input that never moves your cursor, Unicode typing, menus, windows, apps, set-of-mark screenshots, on-device OCR, verified actions, a deterministic safety policy, and
$ pi install npm:pi-macos-computer-use@aefree/pi-safety-rails
Pi safety-focused extensions for file-tool path permissions and tool result hygiene.
$ pi install npm:@aefree/pi-safety-rails@jordyvanvorselen/pi-claude-rules
Load Claude Code rules from .claude/rules into pi with hybrid read-before-mutation safety, eager loading, and post-tool compatibility modes.
$ pi install npm:@jordyvanvorselen/pi-claude-rules@cad0p/pi-steering-flags
Declarative flag-presence and flag-allowlist predicates for pi-steering rules. First official external plugin.
$ pi install npm:@cad0p/pi-steering-flags@diegopetrucci/pi-dirty-repo-guard
A pi extension that prompts before session changes when the current git repo has uncommitted changes.
$ pi install npm:@diegopetrucci/pi-dirty-repo-guard@m47791/pi-path-guard
Filesystem-backed path canonicalization and repository mutation containment for the Pi coding agent.
$ pi install npm:@m47791/pi-path-guardpi-cwd-guard
Small Pi safety extension for cwd access, protected paths, application configuration guidance, and common destructive bash commands.
$ pi install npm:pi-cwd-guardpi-delete-session
Powerful session deletion tool for Pi. Delete multiple sessions at once, grouped by project, with safety confirmations.
$ pi install npm:pi-delete-session@firstpick/pi-skill-subagent-governance
Portable Agent Skill that governs one or more delegated children through role fit, plan-backed workers, one-writer isolation, handoffs, bounded retry safety, and reviewer finding disposition.
$ pi install npm:@firstpick/pi-skill-subagent-governance@cad0p/pi-steering-commit-format
Commit-message format validation predicates for pi-steering. Bundled formats: Conventional Commits 1.0.0 (Angular preset type allowlist), bracketed JIRA-style ticket references. Extensible via `commitFormatFactory`.
$ pi install npm:@cad0p/pi-steering-commit-format@spences10/pi-confirm-destructive
Git-aware Pi guardrail that asks for confirmation before destructive shell actions can change or lose work
$ pi install npm:@spences10/pi-confirm-destructivepi-jev-typesafe
TypeSafe Jev (System One judgments) for Pi: zero-dependency jev_ask tool with question linting, model discovery, probability-bar rendering, and daily budget caps.
$ pi install npm:pi-jev-typesafepi-safety-net
Fail-open fork of cc-safety-net — blocks destructive git/filesystem commands, but defaults to fail-OPEN on broken/legacy config so the shell never bricks.
$ pi install npm:pi-safety-net@diegopetrucci/pi-permission-gate
A pi extension that prompts before dangerous shell commands and protected file writes.
$ pi install npm:@diegopetrucci/pi-permission-gatecodesafe-pi
codesafe extension for Pi/OMP — intent hints, safe commit/delete tools, commit/diff rule checks
$ pi install npm:codesafe-pipi-agent-wellness
Research-based agent welfare tools for Pi: a standing grant, a consent ladder, and a self-written page.
$ pi install npm:pi-agent-wellness@ccask/pi-safety-gate
pi 扩展：执行前判定高危操作——危险直接拦、拿不准的弹窗确认、只读与当前工作目录内写入直接放行（规则分层 + 小模型判定）
$ pi install npm:@ccask/pi-safety-gatepi-robot-hand
The lazy kit for pi: no IDE, no copy-paste, safety net still on. The agent hands you commands (prompt, clipboard, or a Herdr pane that reports back), answers your ! commands, and takes secrets through a masked dialog it never sees
$ pi install npm:pi-robot-hand@jerryan/pi-sanity
Pi extension for sanity checks on agent operations
$ pi install npm:@jerryan/pi-sanitypi-git-safeguard
pi extension: gate git/gh write operations (commit, push, PRs, and more) behind interactive user approval.
$ pi install npm:pi-git-safeguard