registry / create-pmos / 0.409.0
create-pmos@0.409.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 11d ago · by lpm-firewall-aiSource inspection supports a warning for the scaffold's first-party agent extension and its prompt-routing capability. Provider forwarding is gated and the inspected installer network request serves setup; the source does not establish a concrete attack warranting a block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the scaffolding command and then uses Claude Code in the resulting project.
Impact
The project gains an automatically offered prompt-routing extension, with conditional prompt disclosure to the configured provider. The inspected source does not establish credential theft or an unrelated install-time beacon.
Mechanism
The scaffold flow enables the bundled plugin in project settings. On prompt submission, the plugin may contact the local workspace; the workspace can forward prompt text to its configured provider only when all required gates are open.
AI rationale
Source inspection supports a warning for the scaffold's first-party agent extension and its prompt-routing capability. Provider forwarding is gated and the inspected installer network request serves setup; the source does not establish a concrete attack warranting a block.
Evidence
bin/create-pmos.jsbin/cockpit-install.jspayload/mods/pmos-cockpit/hooks/register.tsxworkspace/lib/jev-route.jsworkspace/lib/typesafe.js.claude/settings.json
Network endpoints2
127.0.0.1:<port>/api/model/routeapi.typesafe.ai
Decision evidence
public snapshotAI called this Suspicious at 81.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a CLI; its scaffold flow offers a first-party plugin in project Claude settings unless the user selects --no-mod.
- The settings merge enables the bundled cockpit plugin and adds its local marketplace.
- When the plugin receives a prompt, it can query routing and submit the prompt to the workspace route helper.
- The helper uses a loopback URL supplied through the terminal environment; the workspace requires a saved key, repository consent, and routing enabled before sending prompts to its provider.
- The inspected installer fetches Node.js metadata from nodejs.org, consistent with its setup function; no unrelated installation collector was identified.
- The file viewer reads a located workspace file using the returned workspace and relative path, then stores the response content.
- The guard recognizes GitHub file mutation tools and builds a set of default branches for classification.
- The status-line cleaner replaces unsafe characters and collapses and trims whitespace.
Evidence against
- The route helper does not receive the provider key, and the provider request is made by the workspace.
Source & flagged code
12 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/ini-workflow-test.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
MediumNetwork
Affected versions and remediation
This report applies to create-pmos@0.409.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.409.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.