pi-secure-it
In-process tool guard and subagent posture hardening for Pi coding agent. Enforces filesystem allow/deny lists and domain allowlists on read, grep, find, ls, write, edit, fetch_content, web_search, and get_search_content — with interactive ask-tier prompt
$ pi install npm:pi-secure-it