registry / create-pmos / 0.429.0

create-pmos@0.429.0

Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The package is a CLI scaffold, with the network-using workspace activation documented as opt-in. The flagged credential and prompt flows are directed to GitHub’s own API or gated behind loopback routing, a saved key, repository consent, a routing switch, and secret scanning.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

The user invokes the CLI; prompt routing requires configured consent and routing settings.

Impact

No unauthorized collection, credential forwarding, or other attack behavior was found.

Mechanism

The cockpit contacts a workspace-provided loopback route. The installer uses GITHUB_TOKEN with GitHub’s release API when retrieving Git for Windows.

AI rationale

Network endpoints2

127.0.0.1:<port>/api/model/routeapi.github.com/repos/git-for-windows/git/releases/latest

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes the package through the create-pmos CLI.
The CLI describes file-mode scaffolding as making no network calls; installing the workspace is opt-in.
The cockpit’s routing URL accepts only a loopback address supplied by the workspace.
Prompt routing requires a saved key, repository consent, and a routing switch that defaults off; prompts that fail the secret scan are withheld.
The installer sends GITHUB_TOKEN to GitHub’s API to retrieve Git for Windows release data.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 786 file(s), 12.7 MB of source, external domains: 127.0.0.1, acme.atlassian.net, acme.slack.com, auth0.com, docs.google.com, docs.npmjs.com, docs.stripe.com, evil.example, example.atlassian.net, example.com, github.com, huggingface.co, jira.example, jira.example.com, mail.example, meet.google.com, pmos-menus.test, purl.org, regulator.example, rivalnotes.example, schemas.openxmlformats.org, share.example, share.invalid, slack.example, slack.example.com, upgrade.invalid, wiki.example, wiki.example.com, www.apple.com, www.w3.org, x.atlassian.net, x.example

Source & flagged code

12 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`; L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; } L183: catch { return false; }

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

2 Critical6 High6 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

CriticalPrevious Version Dangerous Deltaworkspace/board-shot.js

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

Affected versions and remediation

This report applies to create-pmos@0.429.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.429.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-30 03:59:23.418Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / create-pmos / 0.429.0

create-pmos@0.429.0

AI Security Review

scanned 6d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

The user invokes the CLI; prompt routing requires configured consent and routing settings.

Impact

No unauthorized collection, credential forwarding, or other attack behavior was found.

Mechanism

The cockpit contacts a workspace-provided loopback route. The installer uses GITHUB_TOKEN with GitHub’s release API when retrieving Git for Windows.

AI rationale

Network endpoints2

127.0.0.1:<port>/api/model/routeapi.github.com/repos/git-for-windows/git/releases/latest

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes the package through the create-pmos CLI.
The CLI describes file-mode scaffolding as making no network calls; installing the workspace is opt-in.
The cockpit’s routing URL accepts only a loopback address supplied by the workspace.
Prompt routing requires a saved key, repository consent, and a routing switch that defaults off; prompts that fail the secret scan are withheld.
The installer sends GITHUB_TOKEN to GitHub’s API to retrieve Git for Windows release data.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

12 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

2 Critical6 High6 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

CriticalPrevious Version Dangerous Deltaworkspace/board-shot.js

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

Affected versions and remediation

This report applies to create-pmos@0.429.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.429.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-30 03:59:23.418Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.