Install
$ agentstack add skill-romiluz13-pi-agent-skills-pi-mom ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Pi Mom (Master Of Mischief)
Grounding
pi-mono/packages/mom/README.md— features, workspace setup, memory structure (log.jsonlvscontext.jsonl), Events system.pi-mono/packages/mom/docs/events.md— detailed event JSON schema and usage.pi-mono/packages/mom/docs/sandbox.md— Docker vs host mode security isolation details.pi-mono/packages/mom/docs/slack-bot-minimal-guide.md— Slack app manifest and permissions.pi-mono/packages/mom/docs/artifacts-server.md— Express+WebSocket artifacts server, Cloudflare Tunnel for public HTTPS, file watching with chokidar, live reload, path traversal protection, date-prefixed artifact organization.pi-mono/packages/mom/docs/new.md— Multi-platform redesign: PlatformAdapter interface (Slack/Discord/CLI adapters), MomCustomTool interface withinvoke_tooldispatch, bubblewrap channel isolation, unified ChannelMessage format, per-adapter config.pi-mono/packages/mom/docs/v86.md— v86 x86 emulator sandbox evaluation: Alpine Linux in WebAssembly, 9p filesystem for host-guest exchange, state save/restore (~2s), outbound networking.
Invariants
- Dual-File History:
log.jsonlis the source of truth (append-only);context.jsonlis the compacted view sent to the LLM. - Workspace Isolation: Mom runs on the host by default (no isolation). Docker mode (
--sandbox=docker:) is recommended for security — it isolates tool execution to a container where only thedata/directory is mounted to/workspace. - Event Paths: On the host, event files live in
data/events/. Inside the Docker sandbox andevents.md, that same mounted directory is referred to as/workspace/events/orworkspace/events/. - Event Limits: A maximum of 5 events can be queued per channel. Events use unique filenames to avoid overwrites.
- Artifacts Server: Runs Express on port 8080 with Cloudflare Tunnel for public URLs; file watching is recursive via chokidar; WebSocket live reload via
?ws=trueparameter —pi-mono/packages/mom/docs/artifacts-server.md. - Multi-Platform Design: Design doc defines
PlatformAdapterinterface (start,stop,getChannels,sendMessage, etc.), planned adapters (Slack, Discord, CLI),MomCustomToolinterface for host-side tool execution viainvoke_tool, and bubblewrap per-channel isolation —pi-mono/packages/mom/docs/new.md. - Custom Tool Discovery: Custom tools are discovered from
data/tools/**/index.ts(workspace-local) and~/.pi/mom/tools/**/index.ts(global), loaded viajiti—pi-mono/packages/mom/docs/new.md.
Workflows
- Create Skill: Add a
SKILL.mdfile and scripts to/workspace/skills/(global) or/workspace//skills/(channel-specific). - Schedule Task: Write a JSON event file to
data/events/on the host (mounted as/workspace/events/inside Docker) usingimmediate,one-shot, orperiodicevent JSON. - Compaction: When context exceeds limits, older messages are summarized into a compaction event.
- Serve artifacts: Read
docs/artifacts-server.mdfor Express+Tunnel setup andstart-server.shbootstrap. - Custom host-side tools: Read
docs/new.mdMomCustomTool section for factory pattern, ToolAPI, and tool discovery paths.
Anti-patterns
- Do not suggest manual dependency installation on the host; Mom self-manages and installs her own tools (e.g.,
apk add,brew install) within her sandbox. - Avoid using Host mode unless explicitly requested due to security risks. Use
dockermode.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: romiluz13
- Source: romiluz13/pi-agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.