wix-base44-connector

SUSPICIOUS: The core Wix/Base44 API management behavior is coherent with the stated purpose and routes data to official Wix endpoints, but the skill materially expands trust through a runtime-downloaded helper script and a recommended transitive skill install. These are supply-chain and trust-boundary concerns rather than confirmed malware.

This module provides Wix documentation and API helpers, but bash(cmd) executes caller-provided shell commands and is a high-impact risk if exposed to untrusted input. It also performs expected Wix API operations using supplied tokens and can modify OAuth redirect allowlists based on caller input. No credential harvesting, unrelated data exfiltration, or malware behavior is evident; the fragment appears syntactically incomplete as provided. Severity is high if untrusted parties can invoke bash, otherwise dependent on caller controls.