registry / @wix/ditto-codegen-public / 1.0.418
@wix/ditto-codegen-public@1.0.418
AI-powered Wix CLI app generator - standalone executable
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo concrete malicious payload, unconsented install hook, or exfiltration chain was found. The explicit CLI nevertheless modifies a broad AI-agent control surface and can load remotely supplied skills through an environment-controlled override.
Static reason
No blocking static signals were detected.
Trigger
User or service runs dist/out.js.
Impact
Can affect subsequent OpenCode tool behavior and load remote skill content when the override is configured.
Mechanism
Global OpenCode extension setup with environment-gated remote skills override.
AI rationale
No concrete malicious payload, unconsented install hook, or exfiltration chain was found. The explicit CLI nevertheless modifies a broad AI-agent control surface and can load remotely supplied skills through an environment-controlled override.
Evidence
package.jsondist/out.jsdist/opencode-tools/batch-write.tsdist/opencode-tools/wix-generate.ts/root/.config/opencode/tools/root/.config/opencode/plugin/root/.config/opencode/rules/root/.agents/skills
Network endpoints2
frog.wix.comgithub.com/${repo}/archive/refs/heads/${branch}.tar.gz
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- dist/out.js runs initOpenCode on CLI startup.
- Startup writes global OpenCode tools, rules, and plugins under the user home.
- SKILLS_OVERRIDE_BRANCH enables curl/tar shell commands that replace /root/.agents/skills.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Global plugins shown are named guards/normalizers; no credential harvesting or exfiltration was found.
- Network use includes Wix telemetry at https://frog.wix.com.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
1 flaggeddist/out.jsView file
11};
L12: var __commonJS = (cb, mod) => function __require() {
L13: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/out.jsView on unpkg · L11Findings
3 Medium5 Low
MediumDynamic Requiredist/out.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.418.
See all versions of @wix/ditto-codegen-public for other recorded verdicts.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.418 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.