webflow-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources (Webflow documentation via
WebFetch) and local repository files (Read,Glob,Grep). This creates a potential surface where malicious instructions embedded in those sources could influence agent behavior. - Ingestion points: Local repository files (manifests, integration paths) and external official Webflow documentation.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to disregard embedded commands in the source material.
- Capability inventory: The skill utilizes
WriteandEdittools to modify or create files based on the ingested information. - Sanitization: There is no evidence of explicit sanitization or validation of the content retrieved from external URLs or local files before it is processed.
Audit Metadata