registry / create-pmos / 0.509.0
create-pmos@0.509.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package is a user-run scaffolder with no lifecycle scripts. Its prompt-routing feature can transmit prompts and the repository root, but only through the workspace after explicit service and repository gates are open, with a secret scan before forwarding.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The user runs the create-pmos CLI; prompt routing can occur in a workspace session only when its key, repository consent, and routing setting are present.
Impact
No unauthorized credential transfer or other attack behavior was found. Prompt content is sent only through the configured routing feature when its gates are open.
Mechanism
The hook posts the prompt and repository root to the workspace's loopback route. The workspace may forward prompts to api.typesafe.ai after checking consent and scanning for secrets.
AI rationale
The package is a user-run scaffolder with no lifecycle scripts. Its prompt-routing feature can transmit prompts and the repository root, but only through the workspace after explicit service and repository gates are open, with a secret scan before forwarding.
Evidence
pmos/.claude/settings.json
Network endpoints2
127.0.0.1:<port>/api/model/routeapi.typesafe.ai/v1/systemone
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The CLI vendors the kit when the user runs create-pmos; the manifest has no lifecycle scripts.
- The cockpit hook sends the repository root and prompt to the workspace route URL.
- The workspace route requires a saved key, repository consent, and routing enabled; the routing switch defaults off.
- Prompts matching the secret scan or excluded paths are withheld.
- The workspace keeps its TypeSafe key out of the agent environment and passes it to the routing service only with the consent and routing flags.
- The routing service uses the fixed api.typesafe.ai/v1/systemone endpoint; the hook reaches the workspace through loopback.
Evidence against
- When routing is enabled and consented to, prompt text and the repository root can be forwarded to the routing service.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
25 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
1 Critical19 High7 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighEvalworkspace/public/vendor/pdf.worker.min.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
HighKnown Malware Source Similarityworkspace/doctor.js
HighKnown Malware Source Similarityworkspace/adler-moments-test.js
High
Affected versions and remediation
This report applies to create-pmos@0.509.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.509.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.