registry / @wix/create-app / 0.0.268
@wix/create-app@0.0.268
Create Wix apps
AI Security Review
scanned 21d ago · by lpm-firewall-aiThe confirmed risk is automatic first-party agent skills setup during project creation, so this warrants a warning. The reported credential redirection was not supported by the inspected authentication flow, which stores API key auth locally and uses Wix service endpoints.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user creates an app and does not skip installation.
Impact
Wix skills are added to the generated project and may affect agents that use those project skills.
Mechanism
The CLI runs the skills installer with automatic confirmation flags from the generated project directory.
AI rationale
The confirmed risk is automatic first-party agent skills setup during project creation, so this warrants a warning. The reported credential redirection was not supported by the inspected authentication flow, which stores API key auth locally and uses Wix service endpoints.
Evidence
build/index.js
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Project creation queues Wix skills installation when dependency installation is not skipped.
- The CLI runs `npx skills add wix/skills` with automatic confirmation flags in the new project directory.
- The separate MCP setup asks which IDE to configure, and its paths are project-local.
- The inspected API key flow stores auth data locally and configures Wix service endpoints.
Evidence against
- The manifest declares no install lifecycle hook.
- The source does not establish an unrelated credential recipient, broad agent configuration change, or data transfer.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
9 flaggedbuild/chunk-4SRG5UGT.jsView file
2405init_esm_shims();
L2406: var cp = __require("child_process");
L2407: var parse = require_parse();
High
Child Process
Package source references child process execution.
build/chunk-4SRG5UGT.jsView on unpkg · L2405build/generator-3NZGOROC.jsView file
242exports.localsName = _DEFAULT_LOCALS_NAME;
L243: exports.promiseImpl = new Function("return this;")().Promise;
L244: exports.resolveInclude = function(name, filename, isDir) {
High
Eval
Package source references dynamic code evaluation.
build/generator-3NZGOROC.jsView on unpkg · L242•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
2 Critical6 High4 Medium5 Low
CriticalDownload Executebuild/index.js
CriticalTrigger Reachable Dangerous Capabilitybuild/index.js
HighChild Processbuild/chunk-4SRG5UGT.js
HighEvalbuild/generator-3NZGOROC.js
HighCredential Redirect Persistencebuild/index.js
HighCommand Output Exfiltrationbuild/index.js
HighCross File Remote Execution Contextbuild/index.js
HighSemantic Analysis Limitedbuild/generator-3NZGOROC.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulebuild/yoga.wasm
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @wix/create-app@0.0.268.
See all versions of @wix/create-app for other recorded verdicts.
- Review the evidence and your use of @wix/create-app@0.0.268 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.