registry / @wix/create-app / 0.0.246
@wix/create-app@0.0.246
Create Wix apps
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe source does not establish malware, credential theft, or an install hook, but it does establish automatic runtime installation of an uninspected agent-skills package. This warrants a warning rather than a block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the create-app CLI and does not select skip-install.
Impact
May add an external Wix agent-skills extension to the environment used for the generated project.
Mechanism
Automatic noninteractive npx skills installation.
AI rationale
The source does not establish malware, credential theft, or an install hook, but it does establish automatic runtime installation of an uninspected agent-skills package. This warrants a warning rather than a block.
Evidence
build/index.js
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The CLI automatically invokes npx to add wix/skills after project generation unless installation is skipped.
- That command is an agent-skills installation with noninteractive confirmation flags, creating an unresolved extension lifecycle risk.
Evidence against
- package.json has no install, preinstall, or postinstall lifecycle hook.
- MCP configuration is offered through an interactive IDE-selection prompt and targets the generated project.
- The dynamic Function finding is bundled EJS code, not a package-specific payload.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
10 flaggedbuild/chunk-V6PDDX7X.jsView file
2405init_esm_shims();
L2406: var cp = __require("child_process");
L2407: var parse = require_parse();
High
Child Process
Package source references child process execution.
build/chunk-V6PDDX7X.jsView on unpkg · L24052321parsed.args = ["/d", "/s", "/c", `"${shellCommand}"`];
L2322: parsed.command = process.env.comspec || "cmd.exe";
L2323: parsed.options.windowsVerbatimArguments = true;
High
build/generator-6OIH2MBC.jsView file
242exports.localsName = _DEFAULT_LOCALS_NAME;
L243: exports.promiseImpl = new Function("return this;")().Promise;
L244: exports.resolveInclude = function(name, filename, isDir) {
High
Eval
Findings
2 Critical7 High4 Medium5 Low
CriticalDownload Executebuild/index.js
CriticalTrigger Reachable Dangerous Capabilitybuild/index.js
HighChild Processbuild/chunk-V6PDDX7X.js
HighShellbuild/chunk-V6PDDX7X.js
HighEvalbuild/generator-6OIH2MBC.js
HighCredential Redirect Persistencebuild/index.js
HighCommand Output Exfiltrationbuild/index.js
HighCross File Remote Execution Contextbuild/index.js
HighSemantic Analysis Limitedbuild/generator-6OIH2MBC.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulebuild/yoga.wasm
Medium
Affected versions and remediation
This report applies to @wix/create-app@0.0.246.
See all versions of @wix/create-app for other recorded verdicts.
- Review the evidence and your use of @wix/create-app@0.0.246 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.