registry / create-pmos / 0.435.0
create-pmos@0.435.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged credential use authorizes a request to GitHub’s own release API, and the prompt-routing feature requires a user command and is restricted to the local workspace endpoint. The inspected CLI behavior matches the package’s scaffolding and optional workspace purpose.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the create-pmos CLI; workspace installation and model routing require explicit user actions.
Impact
No unauthorized credential transfer or other malicious impact was found in the inspected source.
Mechanism
Scaffolding writes kit files and offers a Claude Code mod. Optional routing sends prompts to the local PMOS workspace; the Windows setup script can use a GitHub token with GitHub’s release API.
AI rationale
The flagged credential use authorizes a request to GitHub’s own release API, and the prompt-routing feature requires a user command and is restricted to the local workspace endpoint. The inspected CLI behavior matches the package’s scaffolding and optional workspace purpose.
Network endpoints6
api.github.com127.0.0.1 (PMOS workspace route)unpkg.comnodejs.orgclaude.aigit-scm.com
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package is a CLI scaffolder; its documented workspace activation is an explicit subcommand.
- The cockpit mod offer is additive and requires the user to trust the project; the CLI does not install it silently.
- Prompt routing requires the user to turn it on with a typed command.
- The routing endpoint accepts only the PMOS workspace’s loopback address.
- The optional Windows Git installer sends GITHUB_TOKEN to GitHub’s own release API.
Evidence against
- No malicious behavior was identified in the inspected source.
- The scanner’s credential-flow lead uses the token only with api.github.com.
- Routing forwards prompt and repository-root data only through an explicitly enabled local workspace route.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
12 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/board-shot.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
MediumNetwork
Affected versions and remediation
This report applies to create-pmos@0.435.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.435.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.