registry / create-pmos / 0.469.0

create-pmos@0.469.0

Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a

AI Security Review

scanned 5d ago · by lpm-firewall-ai

The flagged behaviors have package-related explanations: the project-local agent settings change occurs through the scaffolding command, routing is limited to the local workspace endpoint, and the installer sends a GitHub token only to api.github.com. No lifecycle hook or malicious credential flow was identified.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The user runs the CLI, installer, or workspace features; the package manifest has no lifecycle scripts.

Impact

No automatic credential theft, unrelated data transfer, or install-time agent-control mutation was identified.

Mechanism

The CLI scaffolds bundled files and may add project-local Claude settings; the installer uses a GitHub token only for GitHub’s release API; cockpit routing uses the workspace-provided loopback URL.

AI rationale

Evidence

.claude/settings.json

Network endpoints2

api.github.comLoopback URL from PMOS_ROUTE_URL

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package describes a bundled scaffolder; activating the GUI is an explicit opt-in that installs its native dependency.
Cockpit settings are merged into the project’s .claude/settings.json by the CLI scaffolding flow, preserving existing values.
The cockpit sends route requests only to the loopback URL supplied by the workspace; without that workspace URL, it sends no request.
The installer uses GITHUB_TOKEN for a release lookup at api.github.com, its own service.

Evidence against

The CLI can write agent configuration and link skills when the user runs it.
The workspace uses a saved Anthropic key or ANTHROPIC_API_KEY for its own Claude API feature.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetry

Source & flagged code

11 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`; L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; } L183: catch { return false; }

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

1 Critical6 High6 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper

Affected versions and remediation

This report applies to create-pmos@0.469.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.469.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-31 10:55:47.341Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / create-pmos / 0.469.0

create-pmos@0.469.0

AI Security Review

scanned 5d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The user runs the CLI, installer, or workspace features; the package manifest has no lifecycle scripts.

Impact

No automatic credential theft, unrelated data transfer, or install-time agent-control mutation was identified.

Mechanism

The CLI scaffolds bundled files and may add project-local Claude settings; the installer uses a GitHub token only for GitHub’s release API; cockpit routing uses the workspace-provided loopback URL.

AI rationale

Evidence

.claude/settings.json

Network endpoints2

api.github.comLoopback URL from PMOS_ROUTE_URL

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package describes a bundled scaffolder; activating the GUI is an explicit opt-in that installs its native dependency.
Cockpit settings are merged into the project’s .claude/settings.json by the CLI scaffolding flow, preserving existing values.
The cockpit sends route requests only to the loopback URL supplied by the workspace; without that workspace URL, it sends no request.
The installer uses GITHUB_TOKEN for a release lookup at api.github.com, its own service.

Evidence against

The CLI can write agent configuration and link skills when the user runs it.
The workspace uses a saved Anthropic key or ANTHROPIC_API_KEY for its own Claude API feature.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetry

Source & flagged code

11 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

1 Critical6 High6 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper

Affected versions and remediation

This report applies to create-pmos@0.469.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.469.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-31 10:55:47.341Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.