Pi Messenger CrewSAFE
High-performance AI coding agent CLI written in Rust with zero unsafe code
Overview
High-performance AI coding agent CLI written in Rust with zero unsafe code
46a2537504c9OBSERVED · 2026-10-10What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
---
name: pi-messenger-crew
description: Use pi-messenger for multi-agent coordination and Crew task orchestration. Covers joining the mesh, planning from PRDs, working on tasks, file reservations, and agent messaging. Load this skill when using pi_messenger or building with Crew.
---
# Pi-Messenger Crew Skill
Use pi-messenger for multi-agent coordination and Crew task orchestration.
## Quick Reference
### Join the Mesh (Required First)
```typescript
pi_messenger({ action: "join" })
```
### Check Status
```typescript
pi_messenger({ action: "status" })
pi_messenger({ action: "list" }) // See other agents
```
### Crew Workflow
#### 1. Install Crew Agents (one-time)
```typescript
pi_messenger({ action: "crew.install" })
pi_messenger({ action: "crew.agents" }) // Verify 5 agents
```
#### 2. Plan from PRD
```typescript
// Auto-discover PRD.md in current directory
pi_messenger({ action: "plan" })
// Or specify path
pi_messenger({ action: "plan", prd: "path/to/PRD.md" })
```
#### 3. Work on Tasks
```typescript
// Single wave (runs ready tasks once)
pi_messenger({ action: "work" })
// Autonomous (keeps running until done/blocked)
pi_messenger({ action: "work", autonomous: true })
```
#### 4. Task Management
```typescript
pi_messenger({ action: "task.list" })
pi_messenger({ action: "task.ready" }) // Tasks with no pending deps
pi_messenger({ action: "task.show", id: "task-1" })
pi_messenger({ action: "task.start", id: "task-1" })
pi_messenger({ action: "task.done", id: "task-1", summary: "What was done" })
pi_messenger({ action: "task.block", id: "task-1", reason: "Why blocked" })
pi_messenger({ action: "task.unblock", id: "task-1" })
pi_messenger({ action: "task.reset", id: "task-1" })
pi_messenger({ action: "task.reset", id: "task-1", cascade: true }) // Reset dependents too
```
#### 5. Review
```typescript
// Review a task implementation
pi_messenger({ action: "review", target: "task-1" })
// Review the overall plan
pi_messenger({ action: "review", target: "plan", type: "plan" })
```
### File Coordination
```typescript
// Reserve files before editing
pi_messenger({ action: "reserve", paths: ["src/index.ts", "src/types.ts"], reason: "Working on core" })
// Release when done
pi_messenger({ action: "release" })
```
### Agent Communication
```typescript
// Rename yourself
pi_messenger({ action: "rename", name: "MyAgentName" })
// Send message to specific agent
pi_messenger({ action: "send", to: "OtherAgent", message: "Hello!" })
// Broadcast to all
pi_messenger({ action: "send", broadcast: true, message: "Announcement" })
```
## Typical Crew Session
```typescript
// 1. Join
pi_messenger({ action: "join" })
// 2. Plan (spawns planner agent)
pi_messenger({ action: "plan" })
// 3. Check tasks
pi_messenger({ action: "task.list" })
// 4. Work
pi_messenger({ action: "work", autonomous: true })
// 5. Status
pi_messenger({ action: "status" })
```
## Data Storage
Crew stores data in `.pi/messenger/crew/`:
```
.pi/messenger/crew/
├── config.json # Project config (concurrency, etc.)
├── plan.json # Plan metadata
├── plan.md # Planner output
├── tasks/
│ ├── task-1.json # Task metadata
│ ├── task-1.md # Task spec
│ └── ...
├── blocks/
│ └── task-N.md # Block context
└── artifacts/ # Debug artifacts
```
## Config Options
Create `.pi/messenger/crew/config.json`:
```json
{
"concurrency": {
"workers": 3 // Max parallel workers (default: 2)
},
"planning": {
"maxPasses": 3 // Max planner passes before accepting last output
}
}
```Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (1)
.beads/beads.jsonl
Gates applied: no_behavioural_pass.
46a2537504c9full audit observations/trust-audit/skill/dicklesworthstone__pi-messenger-crew.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 46a2537504c9 | SAFE | B | 89 | first audit |
Questions
What does the Pi Messenger Crew skill do?
High-performance AI coding agent CLI written in Rust with zero unsafe code
Is Pi Messenger Crew safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Pi Messenger Crew access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (46a2537504c9), read on 2026-10-10. The repository is watched, and a new audit runs when it changes — this is the first audit.