@wix/create-app@0.0.227
Create Wix apps
AI Security Review
scanned 4mo ago · by lpm-firewall-aiNo malicious install hook or theft/destructive behavior was found. The automatic agent-skills installation is a real, user-invoked AI-agent capability and warrants a warning under the stated policy.
Static reason
No blocking static signals were detected.
Trigger
User runs the create-app CLI and completes project creation without --skip-install.
Impact
Adds third-party agent skills and may create project-local AI-agent configuration.
Mechanism
automatic external skills installation plus project-local MCP configuration
AI rationale
No malicious install hook or theft/destructive behavior was found. The automatic agent-skills installation is a real, user-invoked AI-agent capability and warrants a warning under the stated policy.
Evidence
package.jsonbin/index.cjsbuild/index.jsbuild/generator-Z254FDKG.js[new-project]/.cursor/mcp.json[new-project]/.vscode/mcp.json[new-project]/.mcp.json
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- build/index.js:66963 invokes `npx --yes skills add wix/skills -y` during normal project creation when installs are enabled.
- build/index.js:67027 schedules that skills-install command automatically after dependency installation.
- build/index.js:66554-66556 targets MCP config paths in the newly created project for Cursor, VS Code, or Claude Code.
Evidence against
- package.json has no preinstall/install/postinstall lifecycle hook.
- bin/index.cjs only checks Node version then loads the CLI entrypoint.
- MCP IDE choice is presented interactively and includes a No option; no broad/global agent-config path is shown.
- No credential harvesting, destructive action, or covert exfiltration chain was confirmed in inspected entrypoint/generation code.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
3 flaggedbuild/generator-Z254FDKG.jsView file
242exports.localsName = _DEFAULT_LOCALS_NAME;
L243: exports.promiseImpl = new Function("return this;")().Promise;
L244: exports.resolveInclude = function(name, filename, isDir) {
Low
Eval
Package source references a known benign dynamic code generation pattern.
build/generator-Z254FDKG.jsView on unpkg · L242build/yoga.wasmView file
•path = build/yoga.wasm
kind = wasm_module
sizeBytes = 88658
magicHex = [redacted]
Medium
build/index.jsView file
•path = build/index.js
kind = oversized_source_file
sizeBytes = 2474877
magicHex = [redacted]
Findings
1 High4 Medium6 Low
HighOversized Source Filebuild/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulebuild/yoga.wasm
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalbuild/generator-Z254FDKG.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @wix/create-app@0.0.227.
See all versions of @wix/create-app for other recorded verdicts.
- Review the evidence and your use of @wix/create-app@0.0.227 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.