registry / create-pmos / 0.437.0

create-pmos@0.437.0

Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The flagged credential flow is a local prompt-routing bridge, not automatic credential transmission. External classification requires a saved key, repository consent, and the routing switch, and the service host is fixed in source.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A prompt is routed only when routing is on; external classification additionally requires a saved key, repository consent, and the routing switch.

Impact

Eligible prompt text may be sent for classification when the configured consent gates are open; no credential exfiltration or unrelated account action was identified.

Mechanism

The hook sends eligible prompts to the local workspace over loopback. The workspace may forward them to its fixed classification service after the gates and secret scan pass.

AI rationale

Network endpoints2

127.0.0.1api.typesafe.ai

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The cockpit hook accepts only the workspace-provided loopback URL for prompt routing.
The workspace requires a saved key, repository consent, and the separate routing switch before sending a prompt; secret-scanned and excluded prompts are withheld.
The outbound classifier host is fixed as api.typesafe.ai, and the source says redirects are refused.
Turning routing on requires the user's own typed command.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 814 file(s), 13.2 MB of source, external domains: 127.0.0.1, acme.atlassian.net, acme.slack.com, auth0.com, docs.google.com, docs.npmjs.com, docs.stripe.com, evil.example, example.atlassian.net, example.com, github.com, huggingface.co, jira.example, jira.example.com, mail.example, meet.google.com, pmos-menus.test, purl.org, regulator.example, rivalnotes.example, schemas.openxmlformats.org, share.example, share.invalid, slack.example, slack.example.com, upgrade.invalid, wiki.example, wiki.example.com, www.apple.com, www.w3.org, x.atlassian.net, x.example

Source & flagged code

12 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`; L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; } L183: catch { return false; }

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

2 Critical6 High6 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

CriticalPrevious Version Dangerous Deltaworkspace/board-shot.js

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

Affected versions and remediation

This report applies to create-pmos@0.437.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.437.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-30 04:01:25.867Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / create-pmos / 0.437.0

create-pmos@0.437.0

AI Security Review

scanned 6d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A prompt is routed only when routing is on; external classification additionally requires a saved key, repository consent, and the routing switch.

Impact

Eligible prompt text may be sent for classification when the configured consent gates are open; no credential exfiltration or unrelated account action was identified.

Mechanism

The hook sends eligible prompts to the local workspace over loopback. The workspace may forward them to its fixed classification service after the gates and secret scan pass.

AI rationale

Network endpoints2

127.0.0.1api.typesafe.ai

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The cockpit hook accepts only the workspace-provided loopback URL for prompt routing.
The workspace requires a saved key, repository consent, and the separate routing switch before sending a prompt; secret-scanned and excluded prompts are withheld.
The outbound classifier host is fixed as api.typesafe.ai, and the source says redirects are refused.
Turning routing on requires the user's own typed command.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

12 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

2 Critical6 High6 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

CriticalPrevious Version Dangerous Deltaworkspace/board-shot.js

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

Affected versions and remediation

This report applies to create-pmos@0.437.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.437.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-30 04:01:25.867Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.