rcarmo/extension-design
skel/.pi/skills/extension-design/SKILL.md
Design and audit Pi extensions safely (avoid workspace source imports).
$ install --global
skillsauthnpx skillsauth add rcarmo/piclaw extension-designInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 11, 2026, 8:34 PM30.4s1 file scanned
SKILL.md
- name:
- extension-design
- description:
- Design and audit Pi extensions safely (avoid workspace source imports).
- distribution:
- public
Extension design notes
Use this when creating or reviewing extensions to avoid the broken import pattern.
Avoid this pattern
Do not import from the workspace source tree (for example /workspace/piclaw/runtime/src/... or /workspace/.../node_modules).
The running agent uses the installed package, and workspace paths can drift or break after reloads.
Use the installed package instead
Reference the installed dist paths, for example:
import { createBatchExecTool } from "/home/agent/.bun/install/global/node_modules/piclaw/dist/tools/context-tools.js";
Safety checklist
- Use installed dist paths (not workspace source).
- Avoid touching the DB before init.
- Wrap tool handlers in
try/catchto avoid crashes. - Guard filesystem access and
saveToolOutputcalls. - Keep dependencies minimal and explicit.
Quick audit
rg -n "/workspace/piclaw/runtime/src|/workspace/.*/node_modules" /workspace/.pi/extensions
Update skel when changing extensions
cp /workspace/.pi/extensions/<name>.ts /workspace/piclaw/skel/.pi/extensions/<name>.ts
Related Skills
rcarmo/m365-document-link-metadata
documentation
VerifiedTrustedCommunity
Resolve Teams or SharePoint document links to canonical metadata.
511SKILL.mdUpdated Apr 15, 2026
rcarmo/web-search
development
VerifiedTrustedCommunity
Search the web via SearXNG and optionally convert result pages to Markdown.
468SKILL.mdUpdated Apr 11, 2026
rcarmo/web-search-summary
development
VerifiedTrustedCommunity
Search via SearXNG, fetch top results, and return quick summaries plus markdown.
468SKILL.mdUpdated Apr 11, 2026
rcarmo/twitter-summary
testing
VerifiedTrustedCommunity
Fetch a user's recent tweets (tweets, replies, retweets) using Playwright + Nitter fallbacks and produce compact JSON/Markdown summaries.
468SKILL.mdUpdated Apr 11, 2026