registry / create-pmos / 0.405.0

create-pmos@0.405.0

Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a

AI Security Review

scanned 12d ago · by lpm-firewall-ai

The flagged credential pattern is test data used to confirm secret-file rejection, and the plugin routing request is restricted to the workspace’s loopback endpoint. Agent configuration is project-scoped setup performed by the explicitly invoked CLI, which preserves existing settings; the inspected source establishes no concrete attack behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Explicit invocation of the package CLI; the workspace GUI requires its separate subcommand.

Impact

No confirmed credential disclosure, unrequested account action, or harmful persistence was established.

Mechanism

The plugin’s prompt-routing request is restricted to a loopback URL provided by the workspace. The credential-like test value is used to verify that a share is refused.

AI rationale

Evidence

.claude/settings.json

Network endpoints1

127.0.0.1

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package exposes a CLI entry point; no install lifecycle command appears in the inspected manifest.
The CLI scaffolds a project when invoked and can add the package’s local cockpit plugin to that project’s Claude settings, preserving existing values.
A workspace self-test creates a synthetic credential-like value and verifies that the share endpoint refuses the file.
The plugin sends prompt-routing requests only to a loopback URL supplied by the workspace; its request includes the project root and prompt.
The other inspected paths contain PMOS workflow scripts, workspace features, UI modules, and test fixtures; their excerpts did not establish an independent attack.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinified

Source & flagged code

11 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`; L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; } L183: catch { return false; }

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

1 Critical6 High6 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper

Affected versions and remediation

This report applies to create-pmos@0.405.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.405.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-24 09:45:41.430Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / create-pmos / 0.405.0

create-pmos@0.405.0

AI Security Review

scanned 12d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Explicit invocation of the package CLI; the workspace GUI requires its separate subcommand.

Impact

No confirmed credential disclosure, unrequested account action, or harmful persistence was established.

Mechanism

The plugin’s prompt-routing request is restricted to a loopback URL provided by the workspace. The credential-like test value is used to verify that a share is refused.

AI rationale

Evidence

.claude/settings.json

Network endpoints1

127.0.0.1

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package exposes a CLI entry point; no install lifecycle command appears in the inspected manifest.
The CLI scaffolds a project when invoked and can add the package’s local cockpit plugin to that project’s Claude settings, preserving existing values.
A workspace self-test creates a synthetic credential-like value and verifies that the share endpoint refuses the file.
The plugin sends prompt-routing requests only to a loopback URL supplied by the workspace; its request includes the project root and prompt.
The other inspected paths contain PMOS workflow scripts, workspace features, UI modules, and test fixtures; their excerpts did not establish an independent attack.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinified

Source & flagged code

11 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

1 Critical6 High6 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper

Affected versions and remediation

This report applies to create-pmos@0.405.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.405.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-24 09:45:41.430Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.