registry / create-pmos / 0.480.0

create-pmos@0.480.0

Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a

AI Security Review

scanned 4d ago · by lpm-firewall-ai

The flagged process execution and configuration writes are part of the explicitly invoked scaffolding and workspace setup. Prompt routing is constrained to the local workspace and sends prompts externally only when its consent and configuration gates are enabled.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The CLI runs when invoked; prompt routing runs for eligible prompts when enabled in a session.

Impact

No malicious impact identified; configured routing shares eligible prompt text for classification.

Mechanism

The cockpit contacts the workspace over loopback. The workspace sends prompts to the fixed classification service only when its key, repository-consent, and routing gates are open.

AI rationale

Network endpoints2

127.0.0.1api.typesafe.ai

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a command-line entry point and declares no lifecycle scripts.
The cockpit hook accepts only the loopback URL supplied by the workspace.
Prompt classification requires a key, repository consent, and routing enabled; secret-scanned or excluded prompts are withheld.
The external classification service host is fixed as api.typesafe.ai.

Evidence against

When routing is configured and consented to, qualifying prompts may be sent to api.typesafe.ai for model classification.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 887 file(s), 14.5 MB of source, external domains: 127.0.0.1, acme.atlassian.net, acme.slack.com, app.amplitude.com, auth0.com, boards.example.com, boards.pm-os.app, boards.test, docs.google.com, docs.npmjs.com, docs.stripe.com, drive.example, evil.example, example.atlassian.net, example.com, github.com, huggingface.co, jira.example, jira.example.com, mail.example, mcp.atlassian.com, mcp.slack.com, meet.google.com, pmos-menus.test, purl.org, regulator.example, rivalnotes.example, schemas.openxmlformats.org, share.example, share.invalid, slack.example, slack.example.com, upgrade.invalid, wiki.example, wiki.example.com, www.apple.com, www.w3.org, x.atlassian.net, x.example

Source & flagged code

12 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`; L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; } L183: catch { return false; }

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

1 Critical6 High7 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper

Affected versions and remediation

This report applies to create-pmos@0.480.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.480.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-01 11:18:50.048Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / create-pmos / 0.480.0

create-pmos@0.480.0

AI Security Review

scanned 4d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The CLI runs when invoked; prompt routing runs for eligible prompts when enabled in a session.

Impact

No malicious impact identified; configured routing shares eligible prompt text for classification.

Mechanism

The cockpit contacts the workspace over loopback. The workspace sends prompts to the fixed classification service only when its key, repository-consent, and routing gates are open.

AI rationale

Network endpoints2

127.0.0.1api.typesafe.ai

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a command-line entry point and declares no lifecycle scripts.
The cockpit hook accepts only the loopback URL supplied by the workspace.
Prompt classification requires a key, repository consent, and routing enabled; secret-scanned or excluded prompts are withheld.
The external classification service host is fixed as api.typesafe.ai.

Evidence against

When routing is configured and consented to, qualifying prompts may be sent to api.typesafe.ai for model classification.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

12 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

1 Critical6 High7 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

MediumSecret Patternworkspace/premium-viewer-share-test.js

MediumDynamic Requirebin/create-pmos.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helper

Affected versions and remediation

This report applies to create-pmos@0.480.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.480.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-01 11:18:50.048Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.