webflow-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches current official documentation and API references from the Webflow developer portal.\n- [DATA_EXFILTRATION]: Includes explicit instructions to never read, echo, persist, or place token values in commands, logs, or reports, following secret management best practices.\n- [INDIRECT_PROMPT_INJECTION]: The skill manages the attack surface associated with processing external data (webhook payloads and documentation).\n
- Ingestion points: Webflow developer documentation and webhook payloads.\n
- Boundary markers: The skill requires explicit verification of Webflow signatures and timestamps before processing payload data.\n
- Capability inventory: Uses file writing and editing tools to implement handlers based on discovered documentation.\n
- Sanitization: Enforces signature validation, timestamp checks (5-minute window), and redaction of sensitive data in logs.
Audit Metadata