registry / create-pmos / 0.419.0
create-pmos@0.419.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe reviewed code supports the package's scaffolding and local workspace purpose. The flagged credential flow sends an optional GitHub token only to GitHub's API, and prompt routing is gated by repository consent and an explicit routing setting.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; workspace installation and launch require the `workspace` command. Prompt routing runs only when its configuration gates are enabled.
Impact
No unauthorized credential transfer or other attack impact was identified in the inspected paths.
Mechanism
The CLI copies bundled files and registers the package's local cockpit plugin. The installer sends an available GitHub token to GitHub's API for release metadata; configured prompt routing sends eligible prompts through the workspace's loopback endpoint.
AI rationale
The reviewed code supports the package's scaffolding and local workspace purpose. The flagged credential flow sends an optional GitHub token only to GitHub's API, and prompt routing is gated by repository consent and an explicit routing setting.
Evidence
target repository/pmos/**target repository/.pmos-profiletarget repository/.gitattributestarget repository/.claude/settings.jsontarget repository/.claude/skills/*
Network endpoints2
api.github.com/repos/git-for-windows/git/releases/latest127.0.0.1:<workspace-port>/api/model/route
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a command-line scaffolder whose behavior is selected from explicit command arguments.
- The scaffolder copies its bundled kit and offers its own cockpit plugin through project settings; the plugin is local to the project.
- Prompt routing requires a saved key, repository consent, and routing enabled; the request path also checks configuration and withholds prompts that match secret or excluded-path rules.
- The Windows installer uses GITHUB_TOKEN as authorization only for the GitHub API request that retrieves Git for Windows release metadata.
Evidence against
- The `workspace` command installs or upgrades the bundled terminal app and launches it, which is an expected, explicit activation path.
- The cockpit plugin can inspect session prompts for model routing, but external classification is gated by user configuration and consent.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
12 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/board-programs-test.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
MediumNetwork
Affected versions and remediation
This report applies to create-pmos@0.419.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.419.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.