registry / create-pmos / 0.445.0
create-pmos@0.445.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package behaves as a scaffolding CLI with an optional local workspace. Its networked prompt-routing path is gated by a saved key, repository consent, and a switch that defaults off; the reviewed credential transport goes to GitHub’s own API.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The CLI acts when invoked; optional prompt classification requires all routing gates to be enabled.
Impact
No unauthorized collection or account action was found. When deliberately enabled, prompt classification sends prompt text to the configured service for routing.
Mechanism
The workspace may send a prompt to its fixed classifier endpoint after a saved key, repository consent, and the routing setting are present. The setup script uses official download and release hosts.
AI rationale
The package behaves as a scaffolding CLI with an optional local workspace. Its networked prompt-routing path is gated by a saved key, repository consent, and a switch that defaults off; the reviewed credential transport goes to GitHub’s own API.
Network endpoints3
api.typesafe.ai/v1/systemoneapi.github.com/repos/git-for-windows/git/releases/latestnodejs.org/dist/index.json
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a PMOS scaffolding CLI and exposes bin/create-pmos.js as its command entry.
- Prompt routing requires a saved key, repository consent, and a routing switch that defaults off; secret-scanned or excluded prompts are withheld.
- The routing service uses the fixed api.typesafe.ai/v1/systemone endpoint for classification.
- The Windows setup script sends GITHUB_TOKEN only to api.github.com to request Git for Windows release information.
Evidence against
- The CLI can execute processes and write project configuration, but those actions are tied to explicit CLI commands, including the separately invoked workspace subcommand.
- Static findings for network access and prompt transmission correspond to gated model-routing functionality; no automatic credential theft or unrelated collector was identified.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
12 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/adler-moments-test.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
MediumNetwork
Affected versions and remediation
This report applies to create-pmos@0.445.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.445.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.