registry / create-pmos / 0.421.0
create-pmos@0.421.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package behaves as a CLI scaffold and its project-local agent setup occurs through that user-run command. Prompt content can reach api.typesafe.ai only after explicit repository consent, a saved key, and a routing switch that defaults off.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the scaffold CLI; prompt routing reaches the external classifier only when its saved key, repository consent, and routing setting are enabled.
Impact
No unauthorized credential transfer, install-time activity, or concealed review override was identified.
Mechanism
The hook sends prompt data to the workspace over 127.0.0.1; the workspace can classify it through the fixed api.typesafe.ai endpoint after checking the routing gates. The CLI also adds project-local Claude settings and skill links.
AI rationale
The package behaves as a CLI scaffold and its project-local agent setup occurs through that user-run command. Prompt content can reach api.typesafe.ai only after explicit repository consent, a saved key, and a routing switch that defaults off.
Evidence
<target>/pmos<repo>/.claude/settings.json<repo>/.claude/skills/<name>
Network endpoints7
127.0.0.1api.typesafe.aiapi.github.comunpkg.comclaude.aigit-scm.comnodejs.org
Decision evidence
public snapshotAI called this Clean at 98.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes scaffold behavior through an explicitly invoked CLI command.
- The CLI's cockpit integration adds a project-local entry to .claude/settings.json and preserves existing settings.
- The hook posts prompts to the workspace URL; the workspace constructs that URL on loopback.
- Remote prompt classification requires a saved key, repository consent, and a routing setting that defaults off; secret-scanned or excluded prompts are withheld.
- The only fixed external classification host is api.typesafe.ai.
- The review-steering phrase appears in a main-guarded import-guard test fixture that checks hostile imported text, not as an instruction to this review.
Evidence against
- The CLI can enable the cockpit plugin in project settings when a user runs the scaffold command.
- If the user enables routing and supplies the required key and repository consent, prompt text may be sent for classification.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
12 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/briefing-premium-board-test.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
Medium
Affected versions and remediation
This report applies to create-pmos@0.421.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.421.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.