pebbles
Verified Safeby Christoph-D
Overview
Pebbles is a lightweight, agent-first command-line task tracking tool optimized for coding AI agents to manage tasks, bugs, features, and epics.
Installation
No command providedSecurity Notes
The system is a CLI tool that operates on local markdown files. Input parsing for commands (JSON for `new`/`update`, filter strings for `query`) and filename slugification for titles appear robust, mitigating common injection and path traversal risks. The `pebbles.ts` plugin uses `bun spawn` to execute `peb` commands, passing arguments as separate strings rather than a single shell command, which is generally safer than direct `eval` or unsanitized shell execution. No direct network risks or hardcoded secrets are apparent. The primary risk would be malicious input crafted by an agent leading to unintended file system operations within the `.pebbles` directory or the designated plugin directory, though current sanitization and structured input parsing limits this.
Similar Servers
trigger.dev
A platform for building and executing reliable, scalable background tasks and complex workflows, supporting various runtimes (Node.js, Python, Bun), including advanced AI agent orchestration, event-driven processing, and real-time data handling.
conductor-tasks
Conductor Tasks acts as an intelligent AI-powered assistant for developers, streamlining the entire development lifecycle from task generation and planning (parsing PRDs, expanding tasks, generating implementation steps) to execution and code modification (generating diffs). It provides visual task management, integrates with various IDEs, and leverages multiple LLM providers for optimal results and cost efficiency.
responsible-vibe-mcp
Manages conversation state and guides LLM coding agents through structured software development workflows with long-term project memory and multi-agent collaboration.
mcp-beads-village
Multi-agent task coordination, issue tracking, and file locking to prevent conflicts between AI agents working on a shared codebase.