wix-base44-headless

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt explicitly instructs the agent to collect credentials "from your prompt" and write them into src/wix.config.json (WIX_CLIENT_ID + WIX_METASITE_ID) and references a build-time Wix connector token for admin/seed calls, which requires embedding or handling secret values verbatim and therefore risks secret exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the app fetches and renders outsider-authored commerce text/content coming from non-first-party Wix site data (e.g., storefront product fields and bookings service fields) via the required workflow’s REST calls—e.g., queryProducts/getProductBySlug feed plainDescription into dangerouslySetInnerHTML, and bookings queryServices feed service.name/description into UI.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runs an install at runtime using the command "CI=1 npx -y skills add wix/skills/skills/wix-base44-headless --yes" which fetches remote package code that the skill later reads and executes (the seed modules are loaded from the installed skill and run via new Function), so this is a runtime external dependency that executes fetched code.