webflow-migration-deep-dive
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected in the skill's instructions or referenced files. The workflow follows a structured approach with clear separation between data preparation and live mutation.
- [CREDENTIALS_SAFE]: The skill contains explicit instructions to prevent the exposure of API tokens, strictly forbidding the agent from reading, echoing, or persisting credentials in logs, examples, or command output.
- [EXTERNAL_DOWNLOADS]: The skill references and fetches documentation from official Webflow developer portals. These are recognized as well-known and trusted technology services.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to ingest external content (such as WordPress exports or CSV files), it mitigates potential injection risks through explicit field mapping, canary testing, and mandatory human approval gates before publishing any content to a live environment.
Audit Metadata