webflow-designer-api
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a knowledge base for Webflow development, providing architectural guidance and API references for building Designer Extensions.
- [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/search_references.py) designed to search through documentation files. The script implements security controls, including path resolution checks to prevent directory traversal and a regex-based filter (_INJECTION_RE) to strip potential prompt injection sequences from the documentation content before it is displayed. - [EXTERNAL_DOWNLOADS]: The documentation references official Webflow developer tools such as
@webflow/webflow-cliandcreate-webflow-extension. It also uses legitimate placeholder image services (e.g.,picsum.photos) in its code examples. - [CREDENTIALS_UNSAFE]: A public OAuth Client ID for the official Webflow Designer API Playground is included in
assets/install-playground-prompt.md. This is a standard public identifier required for the app's authorization flow and does not constitute a secret exposure.
Audit Metadata