registry / create-pmos / 0.466.0

create-pmos@0.466.0

Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a

AI Security Review

scanned 5d ago · by lpm-firewall-ai

The flagged credential and network behavior resolves to a user-run installer and a prompt-routing feature whose external send requires a saved key, repository consent, and a route switch that defaults off. The inspected source does not show malicious credential collection or unauthorized account actions.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user runs the CLI; prompt routing is handled during eligible prompt submissions when the workspace route gates permit it.

Impact

No unauthorized credential or project-data transfer was identified. Prompt classification is gated and filtered before transmission.

Mechanism

The CLI configures a local project plugin. The hook sends route requests to a loopback workspace endpoint; the workspace requires its saved key, repository consent, and the route switch before sending a prompt to Jev.

AI rationale

Evidence

.claude/settings.json

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a `create-pmos` CLI; no npm lifecycle script is present.
The CLI adds a local cockpit plugin entry to the repository’s Claude settings as part of scaffolding.
The hook routes eligible prompts through a loopback workspace endpoint, and routing to Jev requires a saved key, repository consent, and a route switch that defaults off.
The workspace route code withholds prompts that match its secret scan or excluded paths.

Evidence against

The cockpit hook can send prompt text and the repository root to the local workspace route endpoint when routing is active.
The CLI enables a project-local Claude plugin entry during scaffolding.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetry

Source & flagged code

11 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`; L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; } L183: catch { return false; }

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

1 Critical6 High6 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper

Affected versions and remediation

This report applies to create-pmos@0.466.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.466.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-31 07:04:48.993Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / create-pmos / 0.466.0

create-pmos@0.466.0

AI Security Review

scanned 5d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user runs the CLI; prompt routing is handled during eligible prompt submissions when the workspace route gates permit it.

Impact

No unauthorized credential or project-data transfer was identified. Prompt classification is gated and filtered before transmission.

Mechanism

AI rationale

Evidence

.claude/settings.json

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a `create-pmos` CLI; no npm lifecycle script is present.
The CLI adds a local cockpit plugin entry to the repository’s Claude settings as part of scaffolding.
The hook routes eligible prompts through a loopback workspace endpoint, and routing to Jev requires a saved key, repository consent, and a route switch that defaults off.
The workspace route code withholds prompts that match its secret scan or excluded paths.

Evidence against

The cockpit hook can send prompt text and the repository root to the local workspace route endpoint when routing is active.
The CLI enables a project-local Claude plugin entry during scaffolding.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetry

Source & flagged code

11 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

1 Critical6 High6 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper

Affected versions and remediation

This report applies to create-pmos@0.466.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.466.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-31 07:04:48.993Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.