registry / create-pmos / 0.468.0
create-pmos@0.468.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe reviewed alerts resolve to user-invoked setup and workspace behavior: credentials are sent only to their corresponding services, and the cockpit hook routes prompts through a workspace-provided loopback URL. The default scaffolding change to repository settings offers the package's own plugin and supports --no-mod; no malicious behavior was established.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; workspace requests occur through user-facing operations, and cockpit routing requires a workspace-provided loopback URL.
Impact
No automatic credential exfiltration, unrelated account action, or concealed remote code execution was found in the reviewed paths.
Mechanism
The installer contacts official setup and release hosts. Optional workspace features use a configured host or the user's own API key. The vendor command additively offers the cockpit plugin in repository settings and can skip that step with --no-mod.
AI rationale
The reviewed alerts resolve to user-invoked setup and workspace behavior: credentials are sent only to their corresponding services, and the cockpit hook routes prompts through a workspace-provided loopback URL. The default scaffolding change to repository settings offers the package's own plugin and supports --no-mod; no malicious behavior was established.
Evidence
<target>/.claude/settings.json<target>/.claude/skills/<target>/pmos/
Network endpoints6
api.github.comunpkg.comclaude.aigit-scm.comworkspace-provided loopback URLconfigured board host
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as a local scaffolder and workspace app; its manifest has no install lifecycle scripts.
- The cockpit hook sends prompts only to a loopback URL supplied by the workspace; its comment says the hook never sees the workspace key.
- The scaffolder offers the cockpit mod during an explicit vendor command, and supports opting out with --no-mod.
- The installer uses GITHUB_TOKEN only as an Authorization header for GitHub's Portable Git release API.
- Board publishing requires an explicit publish call, a configured host, and a supplied data pack.
Evidence against
- The vendor command adds Claude Code marketplace and enabled-plugin entries to the target repository's .claude/settings.json by default.
- The workspace has network and process execution capabilities, including sending board data to a configured host.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
12 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical6 High6 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/lib/boards-host.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
MediumDynamic Requirebin/create-pmos.js
MediumNetwork
Affected versions and remediation
This report applies to create-pmos@0.468.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.468.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.