webflow-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from the repository and external documentation.\n
- Ingestion points: Reads local project files using Read, Glob, and Grep tools and fetches external documentation using WebFetch as specified in SKILL.md.\n
- Boundary markers: Includes specific instructions to ignore and protect authentication tokens, though it lacks general delimiters for processed file content.\n
- Capability inventory: Can modify files using Write and Edit and perform network requests via WebFetch.\n
- Sanitization: Recommends log redaction for production readiness as a best practice.\n- [EXTERNAL_DOWNLOADS]: Fetches current official Webflow documentation from developers.webflow.com using the WebFetch tool for verification purposes.
Audit Metadata