webflow-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill provides explicit instructions for the secure handling of sensitive data. It mandates that WEBFLOW_API_TOKEN must never be logged, echoed, or persisted in commands or artifacts, ensuring credentials remain in the user's secure store.\n- [EXTERNAL_DOWNLOADS]: The skill uses WebFetch to retrieve configuration and workflow guidelines from the official Webflow developer documentation at developers.webflow.com. This targets a well-known service and is used for reference purposes.\n- [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface as it reads repository manifests and external documentation.\n
- Ingestion points: Project files (Read, Glob, Grep) and external documentation (WebFetch).\n
- Boundary markers: Target resource verification and explicit user confirmation.\n
- Capability inventory: File modifications (Write, Edit) and network access (WebFetch).\n
- Sanitization: Cross-referencing repository evidence with official documented facts.
Audit Metadata