webflow-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses the WebFetch tool to retrieve information from external Webflow documentation sites. This creates a surface where content from those sites could potentially influence the agent's actions.
- Ingestion points: External documentation URLs (e.g., developers.webflow.com) accessed via the WebFetch tool as described in SKILL.md.
- Boundary markers: There are no explicit instructions for using delimiters or boundary markers to isolate the fetched external content.
- Capability inventory: The skill uses Write and Edit tools to modify local repository files based on the fetched information.
- Sanitization: The instructions do not specify any sanitization or validation steps for content retrieved from external sources.
Audit Metadata