webflow-webhooks
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and utility scripts for Webflow webhook integration. All code snippets follow security best practices, such as timing-safe signature comparison and timestamp validation to prevent replay attacks.\n- [SAFE]: No hardcoded credentials were detected. The documentation correctly identifies that secrets should be stored in environment variables and uses appropriate placeholders (e.g.,
YOUR_ACCESS_TOKEN,whsec_xxxxx) in examples.\n- [SAFE]: The Python scriptsearch_references.pyis a utility for searching local documentation files. It includes a sanitization routine that filters out common prompt injection patterns from the content it processes, which is a defensive security measure.\n- [SAFE]: File system access in the utility script is restricted to the skill's local reference directory using path resolution and validation, preventing path traversal or unauthorized file access.
Audit Metadata