webflow-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust security boundaries for handling authentication, explicitly instructing the agent to never read, echo, persist, or place token values in commands, logs, or reports. Credentials remain in the user's existing secret store.
- [SAFE]: External communication via
WebFetchis limited to fetching official Webflow developer documentation fromdevelopers.webflow.com. This is a well-known service and the references are used neutrally for implementation guidance. - [SAFE]: The workflow follows the principle of least privilege, defaulting to read-only inspection and requiring explicit, fresh user approval for any destructive or production-level operations.
Audit Metadata