registry / @henri-ralmeida/prumo / 2.6.1

@henri-ralmeida/prumo@2.6.1

⚠ Under review

Evidence-driven task orchestration with PO First for Claude Code, Kiro, Codex, DeepSeek Harness, Antigravity, OpenCode, Grok Build and GitHub Copilot

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis completed at 86.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 41 file(s), 577 KB of source, external domains: 127.0.0.1, registry.npmjs.org, www.apple.com

Source & flagged code

5 flagged

package.jsonView file

Lines 9-37json

9 "engines": {

10 "node": ">=22"

11 },

12 "license": "MIT",

13 "author": "Henrique Almeida",

14 "repository": {

15 "type": "git",

16 "url": "git+https://github.com/henri-ralmeida/prumo.git"

17 },

18 "homepage": "https://github.com/henri-ralmeida/prumo#readme",

19 "bugs": "https://github.com/henri-ralmeida/prumo/issues",

20 "keywords": ["agent-skills", "claude-code", "kiro", "codex", "deepseek-harness", "dsh", "antigravity", "opencode", "grok-build", "github-copilot", "orchestration", "po-first"],

21 "files": ["bin/", "lib/", "scripts/*.mjs", "!scripts/*.test.mjs", "!scripts/*-smoke.mjs", "scripts/messages.json", "scripts/release-notes.json", "scripts/dashboard.html", "references/", "SKILL.md", "README.md", "README.pt-BR.md", "CHANGELOG.md", "LICENSE"],

22 "scripts": {

23 "test": "node --test scripts/*.test.mjs test/*.test.mjs",

24 "test:coverage": "node tools/run-coverage.mjs",

25 "test:coverage:collect": "node tools/run-coverage.mjs --collect",

26 "coverage:report": "c8 report",

27 "coverage:merge": "node tools/coverage.mjs merge .test-output/coverage-artifacts",

28 "check": "node scripts/check-package.mjs",

29 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 "prepack": "node scripts/check-package.mjs"

31 },

32 "devDependencies": {

33 "c8": "12.0.0",

34 "istanbul-lib-coverage": "3.2.2"

35 }

36}

bin/prumo.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import { parseArgs } from 'node:util'

3import { spawnSync } from 'node:child_process'

4import { readFileSync, writeFileSync, mkdirSync, renameSync, rmSync, existsSync } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/prumo.mjsView on unpkg · L2

5import

scripts/serve.mjsView file

Lines 494-534javascript

494 const url = new URL(req.url, `http://localhost:${PORT}`)

495

496 if (url.pathname === '/api/runs') return json(res,

lib/install.mjsView file

Lines 1-21javascript

1import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, lstatSync, renameSync, unlinkSync, rmdirSync, rmSync, copyFileSync, statSync, accessSync, constants, readlinkSync, symlinkSync, realpathSync, openSync, readSync, closeSync } from 'node:fs'

2import { homedir } from 'node:os'

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

lib/install.mjsView on unpkg · L1

3import { resolve, dirname, join, relative, sep, isAbsolute, delimiter } from 'node:path'

Source & flagged code

5 flagged · loading source

package.jsonView file

•

@henri-ralmeida/prumo@2.6.1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code