webflow-core-workflow-a
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements strong approval boundaries, explicitly requiring the agent to obtain fresh user authorization before performing any create, update, delete, or publishing actions.
- [SAFE]: Instructions strictly prohibit the agent from reading, echoing, or persisting authentication tokens, ensuring credentials remain in the user's secure store.
- [SAFE]: The skill uses WebFetch to access official documentation from Webflow's developer portal (developers.webflow.com), which is a well-known and trusted service.
- [INDIRECT_PROMPT_INJECTION]: The skill processes project files and external documentation, which are potentially untrusted sources. However, the risk is mitigated by explicit instructions to normalize data against known schemas and require human verification for all item IDs and change diffs before execution.
Audit Metadata