registry / create-pmos / 0.438.0
create-pmos@0.438.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged prompt transport is part of the package’s model-routing feature and is gated by a saved key, repository consent, and a switch that defaults off. The installer’s GitHub token use is directed to GitHub for a Portable Git release lookup; no malicious behavior was identified.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Prompt classification occurs only when routing is enabled in a workspace-launched session; kit setup and the Windows installer run when the user invokes them.
Impact
With routing enabled, eligible prompt text is sent for model classification. No automatic credential exfiltration or unrequested account action was identified.
Mechanism
The cockpit contacts a loopback workspace endpoint. The workspace sends eligible prompts to a fixed TypeSafe endpoint only when the key, repository consent, and routing switch are all present.
AI rationale
The flagged prompt transport is part of the package’s model-routing feature and is gated by a saved key, repository consent, and a switch that defaults off. The installer’s GitHub token use is directed to GitHub for a Portable Git release lookup; no malicious behavior was identified.
Evidence
targetRoot/pmostargetRoot/.claude/settings.jsontargetRoot/.claude/skills
Network endpoints3
127.0.0.1:<port>/api/model/routeapi.typesafe.ai/v1/systemoneapi.github.com/repos/git-for-windows/git/releases/latest
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The cockpit sends a prompt and repository root to its configured routing URL.
- The routing URL accepts only the workspace’s loopback address and route path.
- Prompt routing requires a saved key, repository consent, and a switch that defaults off.
- When enabled, classification uses the fixed api.typesafe.ai/v1/systemone endpoint.
- The CLI offers the bundled cockpit mod while setting up the kit in the repository.
Evidence against
- When prompt routing is enabled, prompt text may be sent to TypeSafe for classification.
- The Windows installer can send GITHUB_TOKEN to api.github.com to check for Portable Git releases.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
12 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/adler-moments-test.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
MediumNetwork
Affected versions and remediation
This report applies to create-pmos@0.438.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.438.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.