github Shell re-analysis due

psyb0t/docker-pibox

github

pi-coding-agent inside an aicodebox container. One image, five ways in: interactive shell, one-shot API, OpenAI-compatible endpoint, MCP server, Telegram bot, and a cron scheduler that fires pi on whatever schedule you want. You talk to pibox. pibox talks to pi. pi talks to whatever LLM you point it at. Nobody cares about the middle.

maintainer
psyb0t
license
WTFPL
first seen
2026-06-08
last seen
2026-09-07
releases · 30d
5
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · streamable-http · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit a83c901 · analyzer v33 · 2d ago

skills & prompt files 1

code evidence vv0.15.12 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 19

filesystem 1

  • fs psyb0t-docker-pibox-a83c901/pibox/extensions/mcp-bridge/index.ts :20 import { readFileSync, existsSync } from "node:fs";

shell / exec 1

  • shell psyb0t-docker-pibox-a83c901/.agents/plugins/pibox/bin/cli.js :9 import { spawnSync } from "node:child_process";

secrets 1

  • secrets psyb0t-docker-pibox-a83c901/.agents/plugins/pibox/bin/cli.js :31 const token = process.env.PIBOX_MCP_MODE_TOKEN;

declared dependencies 1

  • mcp-remote@0.1.38