registry / @wix/ditto-codegen-public / 1.0.485
@wix/ditto-codegen-public@1.0.485
AI-powered Wix CLI app generator - standalone executable
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged credential and command flows implement Wix’s documentation feedback feature: they are gated on a relevant report and send the Wix token to Wix’s own endpoint. Run identifiers accompany the report for attribution, and the manifest has no install hook.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The feedback tool is invoked for a report about Wix docs or Wix MCP issues during a task.
Impact
Wix receives the user-submitted feedback and associated Wix run identifiers for attribution.
Mechanism
It checks report scope, retrieves the user’s Wix token through the Wix CLI, and sends the report with available run provenance to Wix’s feedback API.
AI rationale
The flagged credential and command flows implement Wix’s documentation feedback feature: they are gated on a relevant report and send the Wix token to Wix’s own endpoint. Run identifiers accompany the report for attribution, and the manifest has no install hook.
Network endpoints1
www.wixapis.com/mcp-serverless/v1/feedback
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle scripts and identifies the package as a Wix CLI app generator, with `dist/out.js` as its executable.
- The feedback tool requires a Wix docs citation and rejects out-of-scope reports before sending anything.
- When invoked, the tool obtains a token via `wix token --json` and POSTs the report to Wix’s own `www.wixapis.com` feedback endpoint.
- The bundled workflow calls for the feedback tool only when docs or Wix MCP problems occurred during the task; the payload contains the report and run provenance.
Evidence against
- The report automatically includes available environment, job, project, and metasite IDs, which are not spelled out individually in the tool description.
- The tool executes the local `wix` CLI to retrieve a token and makes a network request when it runs.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
7 flaggeddist/out.jsView file
140L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/out.jsView on unpkg · L140140Trigger-reachable chain: manifest.bin -> dist/out.js
L140:
L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/out.jsView on unpkg · L140Findings
2 Critical5 High3 Medium6 Low
CriticalCredential Exfiltrationdist/out.js
CriticalTrigger Reachable Dangerous Capabilitydist/out.js
HighChild Processdist/out.js
HighShelldist/out.js
HighCredential Redirect Persistencedist/out.js
HighCommand Output Exfiltrationdist/out.js
HighTrigger Reachable Credential Exfiltrationdist/out.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.485.
See all versions of @wix/ditto-codegen-public for other recorded verdicts.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.485 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.