registry / @wix/create-app / 0.0.262
@wix/create-app@0.0.262
Create Wix apps
AI Security Review
scanned 29d ago · by lpm-firewall-aiInspected source supports a warning for first-party agent extension setup and unpinned external execution, rather than a malicious verdict. The scanner's credential gateway and download-execution labels do not establish credential theft or an installation-hook attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Explicit CLI project creation with dependency installation enabled; MCP configuration additionally requires selecting an IDE.
Impact
External installer code executes during project creation, and selected IDEs gain a persistent project-local Wix MCP integration; remote package implementation and update behavior remain outside this snapshot.
Mechanism
The CLI invokes an external skills installer and generates configuration that lets an IDE execute an unpinned Wix MCP package through npx. Later MCP launches may resolve newer releases without another setup prompt.
AI rationale
Inspected source supports a warning for first-party agent extension setup and unpinned external execution, rather than a malicious verdict. The scanner's credential gateway and download-execution labels do not establish credential theft or an installation-hook attack.
Evidence
build/index.jstemplates/app/.cursor/mcp.json.ejs.cursor/mcp.json.vscode/mcp.json.mcp.json
Network endpoints1
mcp.wix.com/sse
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json defines no npm installation lifecycle hooks or runtime self-dependency.
- build/index.js automatically runs npx skills add wix/skills with prompts suppressed during project creation; skipInstall disables this task.
- The CLI offers an MCP opt-out and selects configuration paths inside the generated project.
- The Cursor template configures unpinned @wix/mcp-remote execution through npx against https://mcp.wix.com/sse.
- Dynamic function construction in build/generator-FXTZWHP7.js belongs to the bundled EJS template compiler.
- The shared command runner uses child processes with shell execution disabled.
Evidence against
- No concrete credential theft, unrelated credential gateway, or malicious installation hook was established.
- MCP configuration requires an IDE selection; its destination is Wix-owned and its configuration is project-local.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
9 flaggedbuild/chunk-DHIHGDNG.jsView file
2405init_esm_shims();
L2406: var cp = __require("child_process");
L2407: var parse = require_parse();
High
Child Process
Package source references child process execution.
build/chunk-DHIHGDNG.jsView on unpkg · L2405build/generator-FXTZWHP7.jsView file
242exports.localsName = _DEFAULT_LOCALS_NAME;
L243: exports.promiseImpl = new Function("return this;")().Promise;
L244: exports.resolveInclude = function(name, filename, isDir) {
High
Eval
Package source references dynamic code evaluation.
build/generator-FXTZWHP7.jsView on unpkg · L242•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
2 Critical6 High4 Medium5 Low
CriticalDownload Executebuild/index.js
CriticalTrigger Reachable Dangerous Capabilitybuild/index.js
HighChild Processbuild/chunk-DHIHGDNG.js
HighEvalbuild/generator-FXTZWHP7.js
HighCredential Redirect Persistencebuild/index.js
HighCommand Output Exfiltrationbuild/index.js
HighCross File Remote Execution Contextbuild/index.js
HighSemantic Analysis Limitedbuild/generator-FXTZWHP7.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulebuild/yoga.wasm
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @wix/create-app@0.0.262.
See all versions of @wix/create-app for other recorded verdicts.
- Review the evidence and your use of @wix/create-app@0.0.262 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.