registry / create-pmos / 0.517.0

create-pmos@0.517.0

Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a

AI Security Review

scanned 22h ago · by lpm-firewall-ai

The reviewed behavior matches a scaffolding CLI with an optional local workspace. Prompt routing is limited to the workspace loopback endpoint and is enabled only by an explicit user command; the credential-related GitHub helper serves a repository-selected login to GitHub.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

The user runs the CLI; prompt routing additionally requires the user to enable it for the session.

Impact

No unauthorized credential transfer or other malicious behavior was identified.

Mechanism

The CLI copies bundled files and may register the package's own mod and skills. Enabled routing sends eligible prompts to the local workspace loopback endpoint.

AI rationale

Evidence

pmos/.pmos-profile.gitattributes.claude/settings.json.claude/skills/<skill>

Network endpoints1

127.0.0.1:<port>/api/model/route

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest describes a scaffolder and exposes bin/create-pmos.js as its CLI.
The CLI copies the bundled kit only when the user runs the vendor command and the target does not already exist.
Cockpit model routing accepts only a PMOS workspace loopback URL.
Routing is off until the user types /pmos-route on; it routes eligible prompts only while enabled.
The GitHub credential helper is limited to HTTPS GitHub origins and a login chosen for that repository.

Evidence against

When routing is enabled, eligible prompt text and the repository root are sent to the local PMOS workspace.
The CLI can register its own cockpit mod in project Claude settings and link kit skills under .claude/skills.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStrings

Source & flagged code

25 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`; L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; } L183: catch { return false; }

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

1 Critical19 High7 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighEvalworkspace/public/vendor/pdf.worker.min.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

HighKnown Malware Source Similarityworkspace/doctor.js

HighKnown Malware Source Similarityworkspace/adler-moments-test.js

High

Affected versions and remediation

This report applies to create-pmos@0.517.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.517.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 00:46:11.320Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / create-pmos / 0.517.0

create-pmos@0.517.0

AI Security Review

scanned 22h ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

The user runs the CLI; prompt routing additionally requires the user to enable it for the session.

Impact

No unauthorized credential transfer or other malicious behavior was identified.

Mechanism

The CLI copies bundled files and may register the package's own mod and skills. Enabled routing sends eligible prompts to the local workspace loopback endpoint.

AI rationale

Evidence

pmos/.pmos-profile.gitattributes.claude/settings.json.claude/skills/<skill>

Network endpoints1

127.0.0.1:<port>/api/model/route

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest describes a scaffolder and exposes bin/create-pmos.js as its CLI.
The CLI copies the bundled kit only when the user runs the vendor command and the target does not already exist.
Cockpit model routing accepts only a PMOS workspace loopback URL.
Routing is off until the user types /pmos-route on; it routes eligible prompts only while enabled.
The GitHub credential helper is limited to HTTPS GitHub origins and a login chosen for that repository.

Evidence against

When routing is enabled, eligible prompt text and the repository root are sent to the local PMOS workspace.
The CLI can register its own cockpit mod in project Claude settings and link kit skills under .claude/skills.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStrings

Source & flagged code

25 flagged

workspace/premium-viewer-share-test.jsView file

61patternName = generic_password severity = medium line = 61

Medium

Secret Pattern

Package contains a possible secret pattern.

workspace/premium-viewer-share-test.jsView on unpkg · L61

bin/create-pmos.jsView file

23const path = require('path'); L24: const { spawnSync } = require('child_process'); L25:

High

Child Process

Package source references child process execution.

bin/create-pmos.jsView on unpkg · L23

High

Shell

Package source references shell execution.

bin/create-pmos.js

Findings

1 Critical19 High7 Medium5 Low

CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx

HighChild Processbin/create-pmos.js

HighShellbin/create-pmos.js

HighEvalworkspace/public/vendor/pdf.worker.min.js

HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js

HighCommand Output Exfiltrationworkspace/server.js

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js

HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1

HighKnown Malware Source Similarityworkspace/doctor.js

HighKnown Malware Source Similarityworkspace/adler-moments-test.js

High

Affected versions and remediation

This report applies to create-pmos@0.517.0.

See all versions of create-pmos for other recorded verdicts.

Review the evidence and your use of create-pmos@0.517.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 00:46:11.320Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.