registry / @wix/create-app / 0.0.247
@wix/create-app@0.0.247
Create Wix apps
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a real first-party agent-extension setup performed without a separate skills prompt, so it warrants a warning. It does not meet the threshold for malicious install-hook abuse because there is no package lifecycle trigger or concrete malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the create-app flow without skipping dependency installation.
Impact
New agent capabilities may be added to the generated project's AI development workflow.
Mechanism
Noninteractive installation of Wix agent skills through npx.
AI rationale
This is a real first-party agent-extension setup performed without a separate skills prompt, so it warrants a warning. It does not meet the threshold for malicious install-hook abuse because there is no package lifecycle trigger or concrete malicious behavior.
Evidence
build/index.js
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The user-invoked project generator automatically runs a noninteractive command to add Wix agent skills.
- That command is included whenever dependency installation is enabled, without a separate skills-consent prompt.
Evidence against
- The manifest has no preinstall, install, or postinstall hook.
- MCP configuration is offered as an IDE choice and is written only for the selected IDE.
- No source evidence shows credential exfiltration, destructive actions, or a hidden remote payload.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
10 flaggedbuild/chunk-V6PDDX7X.jsView file
2405init_esm_shims();
L2406: var cp = __require("child_process");
L2407: var parse = require_parse();
High
Child Process
Package source references child process execution.
build/chunk-V6PDDX7X.jsView on unpkg · L24052321parsed.args = ["/d", "/s", "/c", `"${shellCommand}"`];
L2322: parsed.command = process.env.comspec || "cmd.exe";
L2323: parsed.options.windowsVerbatimArguments = true;
High
build/generator-233OYLKO.jsView file
242exports.localsName = _DEFAULT_LOCALS_NAME;
L243: exports.promiseImpl = new Function("return this;")().Promise;
L244: exports.resolveInclude = function(name, filename, isDir) {
High
Eval
Findings
2 Critical7 High4 Medium5 Low
CriticalDownload Executebuild/index.js
CriticalTrigger Reachable Dangerous Capabilitybuild/index.js
HighChild Processbuild/chunk-V6PDDX7X.js
HighShellbuild/chunk-V6PDDX7X.js
HighEvalbuild/generator-233OYLKO.js
HighCredential Redirect Persistencebuild/index.js
HighCommand Output Exfiltrationbuild/index.js
HighCross File Remote Execution Contextbuild/index.js
HighSemantic Analysis Limitedbuild/generator-233OYLKO.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulebuild/yoga.wasm
Medium
Affected versions and remediation
This report applies to @wix/create-app@0.0.247.
See all versions of @wix/create-app for other recorded verdicts.
- Review the evidence and your use of @wix/create-app@0.0.247 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.