registry / create-pmos / 0.460.0
create-pmos@0.460.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged credential and network behavior is consistent with the package’s purpose: GitHub credentials are used with GitHub’s API, and prompt routing goes through a loopback workspace with consent gates. Agent configuration changes occur when the user runs the scaffolder and are additive.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user runs the CLI; workspace installation and launch require the workspace subcommand. Plugin hooks run in a Claude session when the user has offered and trusted the project plugin.
Impact
Expected local setup and optional model selection. No unauthorized credential collection, unrelated data transfer, or agent-control hijack was identified.
Mechanism
The CLI copies the bundled kit and may add the plugin setting and skill links. Prompt routing targets the PMOS workspace on loopback; the workspace applies consent and routing gates before asking Jev.
AI rationale
The flagged credential and network behavior is consistent with the package’s purpose: GitHub credentials are used with GitHub’s API, and prompt routing goes through a loopback workspace with consent gates. Agent configuration changes occur when the user runs the scaffolder and are additive.
Evidence
pmos/<repo>/.claude/settings.json<repo>/.claude/skills/<skill>
Network endpoints6
127.0.0.1:<workspace-port>api.github.comunpkg.comclaude.aigit-scm.comnodejs.org
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package is a PMOS scaffolder; its CLI dispatches to vendoring, updating, or workspace activation when run.
- The offered Claude plugin setting is added only when missing, preserving existing values.
- Prompt routing uses the workspace URL from the environment and sends requests to that local address.
- The workspace route handler checks for a known workspace and passes repository consent and routing settings into the routing function.
- The plugin documentation describes the saved key, repository consent, and routing switch required before Jev is asked.
- The install script uses GITHUB_TOKEN only for a request to GitHub’s official release API.
Evidence against
- Workspace activation can install dependencies and launch a local server when explicitly requested.
- When routing is enabled and its gates are open, prompts may be sent to Jev for model selection.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
11 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
1 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helper
Affected versions and remediation
This report applies to create-pmos@0.460.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.460.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.