Skip to content

xaccefy/pi-webxp

v0.10.0MIT

Web research and offensive HTTP transport for Pi Agent — search, fetch, docs, exploit-technique search, raw/race/JWT tooling.

GitHub

pi-webxp

Web research + offensive HTTP transport for the Pi agent.

npm License: MIT

What it is

Two things in one package, deliberately:

Research — ground the agent in reality instead of its training data: web_search, web_fetch, deepwiki (repo/library docs), exploit_search (exploit-technique lookup; needs PREVIEW_IS_API_KEY)

Transport — byte-exact attack primitives for classes where ordinary HTTP clients lie: raw_request (byte-exact smuggling/desync probes), race_send (last-byte-sync batch-release racing), http_request (general purpose)

Network safety gates (network-safety.ts) scope what targets the transport tools will touch.

Works for human + AI workflows: you point it at an authorized target, it does the legwork — no autonomy layer included or wanted.

Install

pi install npm:@xaccefy/pi-webxp

Peer-depends on a Pi-compatible agent host (@earendil-works/pi-coding-agent, pi-ai, pi-tui, typebox). Runtime deps: @xaccefy/pi-shared, open-websearch, tough-cookie, undici.

Development

bun install
bun test --isolate   # 61 tests
bun run typecheck

License

MIT