webflow-webhooks

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive documentation and utility scripts for Webflow webhook integration. All code snippets follow security best practices, such as timing-safe signature comparison and timestamp validation to prevent replay attacks.\n- [SAFE]: No hardcoded credentials were detected. The documentation correctly identifies that secrets should be stored in environment variables and uses appropriate placeholders (e.g., YOUR_ACCESS_TOKEN, whsec_xxxxx) in examples.\n- [SAFE]: The Python script search_references.py is a utility for searching local documentation files. It includes a sanitization routine that filters out common prompt injection patterns from the content it processes, which is a defensive security measure.\n- [SAFE]: File system access in the utility script is restricted to the skill's local reference directory using path resolution and validation, preventing path traversal or unauthorized file access.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 05:20 AM