webflow-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements secure credential handling by strictly forbidding the agent from reading, echoing, or persisting authentication tokens in any output, example, or command.
- [SAFE]: All remote resources, including API documentation and configuration references, are fetched exclusively from official Webflow domains (e.g., developers.webflow.com).
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it ingests data from external documentation and local repository files.
- Ingestion points: Reads local repository manifests via
Glob/Readand external documentation viaWebFetch(SKILL.md, references/official-docs.md). - Boundary markers: The skill lacks technical delimiters for untrusted content but defines a workflow that separates discovery from mutation.
- Capability inventory: The skill is authorized to use
WriteandEditon local files and orchestrates deployment execution. - Sanitization: Risks are mitigated by 'Approval Boundaries' that mandate explicit user confirmation for any production-level or destructive operations.
Audit Metadata