registry / @wix/create-app / 0.0.248
@wix/create-app@0.0.248
Create Wix apps
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a real automatic agent-extension setup capability, but source inspection does not establish malicious behavior or an install-time attack. The scanner’s claimed credential redirect and download-and-execute behavior are not supported by the inspected source.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs the create-app CLI and allows dependency installation.
Impact
An external, unpinned skills tool may modify the generated project’s agent-related files.
Mechanism
Automatic npx installation of Wix agent skills.
AI rationale
This is a real automatic agent-extension setup capability, but source inspection does not establish malicious behavior or an install-time attack. The scanner’s claimed credential redirect and download-and-execute behavior are not supported by the inspected source.
Evidence
build/index.js
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The generated-project workflow automatically runs an unpinned npx skills command with consent-bypassing flags.
- That command is included whenever dependency installation is not skipped, so it runs after a user invokes the creator.
- The command can install Wix agent skills into the newly created project; its downstream behavior is not included in this package.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The package is a user-invoked CLI, not import-time code.
- MCP configuration is presented as an explicit IDE choice, including a No option.
- No source evidence shows credential theft, a credential redirect, destructive behavior, or hidden persistence.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedbuild/chunk-V6PDDX7X.jsView file
2405init_esm_shims();
L2406: var cp = __require("child_process");
L2407: var parse = require_parse();
High
Child Process
Package source references child process execution.
build/chunk-V6PDDX7X.jsView on unpkg · L24052321parsed.args = ["/d", "/s", "/c", `"${shellCommand}"`];
L2322: parsed.command = process.env.comspec || "cmd.exe";
L2323: parsed.options.windowsVerbatimArguments = true;
High
build/generator-233OYLKO.jsView file
242exports.localsName = _DEFAULT_LOCALS_NAME;
L243: exports.promiseImpl = new Function("return this;")().Promise;
L244: exports.resolveInclude = function(name, filename, isDir) {
High
Eval
Findings
2 Critical7 High4 Medium5 Low
CriticalDownload Executebuild/index.js
CriticalTrigger Reachable Dangerous Capabilitybuild/index.js
HighChild Processbuild/chunk-V6PDDX7X.js
HighShellbuild/chunk-V6PDDX7X.js
HighEvalbuild/generator-233OYLKO.js
HighCredential Redirect Persistencebuild/index.js
HighCommand Output Exfiltrationbuild/index.js
HighCross File Remote Execution Contextbuild/index.js
HighSemantic Analysis Limitedbuild/generator-233OYLKO.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulebuild/yoga.wasm
Medium
Affected versions and remediation
This report applies to @wix/create-app@0.0.248.
See all versions of @wix/create-app for other recorded verdicts.
- Review the evidence and your use of @wix/create-app@0.0.248 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.