No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by osolmaz · Agent Tool · ★ 294
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is pi-workflows safe to install? View the security audit →
pi-workflows pi-workflows is a workflow extension for the pi coding agent. It lets you define multi-step agent workflows as TypeScript graphs, trigger them at any point in a pi conversation with , and watch them run live in a standalone terminal viewer. The workflow model is a port of openclaw/acpx flows into pi itself. Agent steps run inside your current pi conversation, so the model keeps everything it already knows from the discussion. The model completes each step by calling a JSON tool, which gives the engine structured, validated output to route on. Install You can also install directly from GitHub: Or try the npm package without installing it: The viewer binary is part of the same package. To get it on your PATH, clone the repo and run , or run it in place with . Quick start Put a workflow file in (project) or (global): typescript // .pi/workflows/echo.workflow.ts import { agent, defineWorkflow } from "@osolmaz/pi-workflows"; export default defineWorkflow({ name: "echo", presentationPrompt: "Give the user the concise reply from the workflow result.", startAt: "reply", nodes: { reply: ag
| Stars | 294 |
| Forks | 16 |
| Language | TypeScript |
| Category | Agent Tool |
| License | MIT |
| Quality Score | 70.1792506685514/100 |
| Open Issues | 2 |
| Last Updated | 2026-09-17 |
| Created | 2026-07-18 |
| Platforms | node |
| Est. Tokens | ~16k |
These tools work well together with pi-workflows for enhanced workflows:
Looking for a pi-workflows alternative? If you're comparing pi-workflows with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Crabbox: warm a box, sync the diff, run the suite.
PWA to manage 🐑 herdr on the go. Tailnet accessible, push notifications, quick actions and more.
Watch a Claude Code or Codex session as a live flow graph, in your terminal or your browser.
Run multiple agents in parallel sandboxed VMs, with a single command, on your PC or in the cloud
Search Claude Code, Codex, Pi, OpenCode, Github Copilot & Cursor transcripts. Resume sessions. Track tokens.
Claude Code multi-account manager, usage monitor (CLI, TUI & MCP cross-account delegation)
Explore other popular agent tool tools:
pi-workflows is Workflow engine, JSON control-flow tool, and live terminal viewer for the pi coding agent. It is categorized as a Agent Tool with 294 GitHub stars.
pi-workflows is primarily written in TypeScript. It covers topics such as herdr-plugin.
You can find installation instructions and usage details in the pi-workflows GitHub repository at github.com/osolmaz/pi-workflows. The project has 294 stars and 16 forks, indicating an active community.
pi-workflows is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to pi-workflows on Agent Skills Hub include crabbox, collie, zoetrope. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: