registry / create-pmos / 0.521.0
create-pmos@0.521.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 21h ago · by lpm-firewall-aiThe flagged behavior is consistent with a scaffolding CLI and its optional Claude Code workspace plugin. The reviewed routing path uses a workspace-provided loopback endpoint, and the CLI's agent configuration writes occur as part of an explicit user command.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The CLI runs when a user invokes create-pmos; prompt routing requires the routing feature to be enabled in the session and a workspace-provided local URL.
Impact
The reviewed behavior supports the package's stated scaffolding and workspace purpose; no unauthorized credential collection or unrelated external transmission was identified.
Mechanism
The CLI copies bundled files and adds missing Claude settings in the target repository. Routing sends eligible prompts to the local workspace endpoint for its routing feature.
AI rationale
The flagged behavior is consistent with a scaffolding CLI and its optional Claude Code workspace plugin. The reviewed routing path uses a workspace-provided loopback endpoint, and the CLI's agent configuration writes occur as part of an explicit user command.
Evidence
pmos/<target>/.claude/settings.json<target>/.claude/skills
Network endpoints1
127.0.0.1
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package is a CLI for scaffolding the PMOS kit and optionally activating its workspace app.
- The cockpit setup adds a marketplace entry and enables the bundled plugin in the target repository's Claude settings.
- The settings write occurs only when the CLI detects a missing setting.
- Prompt routing accepts only a loopback URL supplied through PMOS_ROUTE_URL; absent or invalid values disable the request.
- The routing feature sends prompts to the local workspace endpoint, which the source describes as holding the Jev key and applying routing gates.
Evidence against
- The CLI writes agent configuration, but only as part of a user-run scaffolding command and within the target repository.
- The static credential and shell findings do not establish an automatic credential transfer or unrelated code execution in the reviewed paths.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
25 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
1 Critical19 High7 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighEvalworkspace/public/vendor/pdf.worker.min.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
HighKnown Malware Source Similarityworkspace/doctor.js
HighKnown Malware Source Similarityworkspace/adler-moments-test.js
High
Affected versions and remediation
This report applies to create-pmos@0.521.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.521.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.