webflow-core-workflow-b
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing potentially untrusted data from Webflow form submissions and ecommerce records (SKILL.md). It mitigates this risk by establishing boundary markers through a read-only discovery phase and requiring explicit approval for all mutations. Capabilities are limited to standard file operations and documentation fetching. Sanitization is enforced by specific instructions to redact and minimize sensitive payloads before they are used in diagnostics or logs.
- [DATA_EXPOSURE]: The authentication guidelines provide clear instructions to never read, echo, or persist bearer tokens in commands, logs, or reports, ensuring that credentials remain within the user's secure store.
- [EXTERNAL_DOWNLOADS]: The skill uses the WebFetch tool to retrieve official developer documentation and API indices from developers.webflow.com, which is the established service domain for Webflow developers.
Audit Metadata