webflow-performance-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides code templates for handling webhook payloads, which represents an ingestion surface for untrusted external data.
- Ingestion points: Data from the
payloadobject in theinvalidateOnWebhookfunction (SKILL.md). - Boundary markers: None present in the provided code snippets.
- Capability inventory: Redis cache management including key deletion (
redis.del) and listing (redis.keys). - Sanitization: No explicit sanitization or validation of the webhook payload data is demonstrated in the examples.
- [SAFE]: The skill follows professional development practices for performance tuning. It recommends standard, well-known Node.js libraries (lru-cache, ioredis, p-queue) and provides clear instructions. All remote references are to official Webflow developer resources and documentation.
Audit Metadata