registry / create-pmos / 0.430.0
create-pmos@0.430.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package's entry point is an explicitly invoked CLI, with no install lifecycle script. Its only examined outbound prompt flow is disclosed, constrained to a fixed service, and gated by repository consent and an opt-in routing switch.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the CLI; prompt routing can occur in a workspace-started terminal when its routing settings and consent gates are enabled.
Impact
No unauthorized collection or action was identified. Project setup changes are tied to running the CLI, and external prompt classification requires the documented gates.
Mechanism
The cockpit sends prompts to the workspace over loopback. The workspace may forward eligible prompt text to its fixed classification service after checking consent, the saved key, the routing switch, and secret/exclusion filters.
AI rationale
The package's entry point is an explicitly invoked CLI, with no install lifecycle script. Its only examined outbound prompt flow is disclosed, constrained to a fixed service, and gated by repository consent and an opt-in routing switch.
Evidence
<target>/pmos/<target>/.pmos-profile<target>/.gitattributes<target>/.claude/settings.json<target>/.claude/skills/
Network endpoints2
127.0.0.1 (workspace route)api.typesafe.ai
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI entry point; the source has no install lifecycle script.
- The CLI selects its action from explicit command-line arguments, such as vendoring a kit or activating the workspace.
- Cockpit prompt routing requires a workspace-provided loopback URL; terminals without it make no routing request.
- The workspace sends prompts to Jev only with a saved key, repository consent, and routing switch enabled; routing defaults off, and secret-scanned or excluded prompts are withheld.
- The outbound service host is fixed as api.typesafe.ai, and redirects are refused.
Evidence against
- When routing is enabled with all required gates, prompt text may be sent to api.typesafe.ai for model classification.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
12 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/board-shot.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
MediumNetwork
Affected versions and remediation
This report applies to create-pmos@0.430.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.430.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.