registry / create-pmos / 0.449.0
create-pmos@0.449.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged credential and network behavior is consistent with the package's stated installer and model-routing functions: the GitHub token goes to GitHub, and routing requests use a workspace-provided URL only for eligible prompts when routing is enabled. The CLI configuration writes occur when a user invokes scaffolding; no package lifecycle hook was found.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the CLI to scaffold a project; prompt routing occurs on eligible prompt submissions when routing is enabled and PMOS_ROUTE_URL is available.
Impact
The inspected actions scaffold the project and support model selection. No unrelated credential transfer or concealed install-time action was found.
Mechanism
The CLI copies its bundled kit and can offer its project-local plugin. The plugin sends routing requests to the workspace-provided URL; the installer uses GitHub authorization only for GitHub's release API.
AI rationale
The flagged credential and network behavior is consistent with the package's stated installer and model-routing functions: the GitHub token goes to GitHub, and routing requests use a workspace-provided URL only for eligible prompts when routing is enabled. The CLI configuration writes occur when a user invokes scaffolding; no package lifecycle hook was found.
Evidence
pmos/ (scaffold target)<project>/.claude/settings.json<project>/.claude/skills/
Network endpoints2
api.github.com/repos/git-for-windows/git/releases/latestPMOS_ROUTE_URL (runtime value supplied by the workspace; no literal host in the hook)
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI for scaffolding the PMOS kit and an explicitly invoked workspace command.
- The default CLI action vendors the bundled payload into a project directory; it does not run during package installation.
- The cockpit route request uses PMOS_ROUTE_URL and runs only when routing is enabled and the prompt meets routing criteria.
- The Windows installer sends GITHUB_TOKEN only as authorization to api.github.com, its own service.
Evidence against
- The route feature forwards a prompt and project root to the workspace-provided URL, so prompt data can leave the hook through that configured route service.
- The CLI can add the bundled cockpit plugin to project-local Claude settings when the user runs the scaffolding command.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
12 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/adler-moments-test.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
MediumNetwork
Affected versions and remediation
This report applies to create-pmos@0.449.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.449.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.