registry / create-pmos / 0.433.0
create-pmos@0.433.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe routed credential flows lead to the local workspace and, when configured, the service associated with the user’s TypeSafe key. The installer’s GitHub token is sent to api.github.com for Git release metadata; the inspected behavior does not show exfiltration or unauthorized actions.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the scaffolding or workspace command; prompt routing additionally depends on workspace settings and consent.
Impact
No unauthorized credential transfer or unrelated account action was found. Setup changes are confined to the target project.
Mechanism
The cockpit communicates with the local workspace over loopback. The workspace can classify prompts through TypeSafe when its key, repository consent, and routing settings are enabled.
AI rationale
The routed credential flows lead to the local workspace and, when configured, the service associated with the user’s TypeSafe key. The installer’s GitHub token is sent to api.github.com for Git release metadata; the inspected behavior does not show exfiltration or unauthorized actions.
Network endpoints3
127.0.0.1:<port>/api/model/routeapi.typesafe.ai/v1/systemoneapi.github.com/repos/git-for-windows/git/releases/latest
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a PMOS scaffolding CLI and exposes bin/create-pmos.js.
- The CLI copies the bundled kit into the target repository when the user runs its vendor command.
- The cockpit hook sends prompts only to the workspace-provided loopback URL; it sends nothing when that URL is absent.
- Prompt classification requires a saved key, repository consent, and routing enabled; rules and secret scanning can withhold prompts.
- The workspace’s hosted classifier uses api.typesafe.ai, the service corresponding to the user-supplied TypeSafe key.
- The PowerShell installer uses GITHUB_TOKEN only for the GitHub API request to find Portable Git releases.
Evidence against
- The scanner flagged credential transport and agent configuration writes, but the inspected flows use an authenticated service endpoint or project-local setup invoked by the CLI.
- The installer runs commands and downloads tools, but the inspected downloads are for the package’s documented setup components.
Behavioral surface
ChildProcessCrypto
Source & flagged code
12 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/board-shot.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
MediumNetwork
Affected versions and remediation
This report applies to create-pmos@0.433.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.433.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.