registry / create-pmos / 0.503.0
create-pmos@0.503.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package has no npm lifecycle scripts, and the flagged configuration changes occur when the user invokes the scaffolder. The cockpit's prompt routing requires a URL supplied by the workspace and uses that configured service path.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The npm bin runs when invoked; the included shell and PowerShell setup scripts run only when explicitly launched.
Impact
Scaffolding and optional app setup modify the selected project or user environment. No automatic credential collection or unrelated data transfer was identified.
Mechanism
The CLI copies the bundled kit and may add its plugin to repository settings. The cockpit can route prompts through a URL supplied by the workspace environment.
AI rationale
The package has no npm lifecycle scripts, and the flagged configuration changes occur when the user invokes the scaffolder. The cockpit's prompt routing requires a URL supplied by the workspace and uses that configured service path.
Evidence
.claude/settings.json.claude/skillspmos/~/.pmos~/PMOS
Network endpoints1
unpkg.com
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a PMOS scaffolding tool and declares no npm lifecycle scripts.
- The CLI adds the kit's skills and offers its cockpit mod through repository settings when the user runs the scaffolder.
- The cockpit route helper uses PMOS_ROUTE_URL and returns without making a request when that variable is absent.
- The route request sends the session root and prompt to that configured URL; the source says the workspace holds the service key and the mod does not see it.
- The shell and PowerShell installers document downloading and installing PMOS and its stated prerequisites when the user runs them.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
25 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
1 Critical19 High7 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighEvalworkspace/public/vendor/pdf.worker.min.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
HighKnown Malware Source Similarityworkspace/doctor.js
HighKnown Malware Source Similarityworkspace/adler-moments-test.js
High
Affected versions and remediation
This report applies to create-pmos@0.503.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.503.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.