webflow-cost-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements logic to ingest untrusted data from external sources (Webflow CMS and webhooks) without explicit boundary markers or sanitization, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: Data enters the context via
listItemsLiveandlistItemsinStrategy 1and throughreq.bodyin the webhook handler inStrategy 5(SKILL.md). - Boundary markers: There are no instructions provided to the agent to treat the data returned by these API calls as untrusted or to use delimiters to prevent command execution.
- Capability inventory: The skill has access to powerful tools listed in
allowed-tools(Read, Write, Edit, Grep), which could be misused if an injection occurs. - Sanitization: No sanitization or validation of the CMS item content or webhook payload is present in the provided code snippets.
Audit Metadata