webflow-automation
Warn
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the user to add an external MCP server from
https://rube.app/mcpto their configuration. This server hosts the tools used for Webflow automation. Requiring external, third-party MCP servers introduces a dependency on unverified remote infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Webflow sites which can be controlled by third parties, creating a surface for indirect prompt injection.
- Ingestion points: Content is retrieved using tools such as
WEBFLOW_GET_PAGE_DOM,WEBFLOW_LIST_COLLECTION_ITEMS,WEBFLOW_GET_COLLECTION_ITEM, andWEBFLOW_GET_PAGEinSKILL.md. - Boundary markers: No delimiters or instructions are present to ensure the agent ignores potentially malicious commands embedded in the retrieved site content.
- Capability inventory: The skill has significant capabilities, including creating, updating, or deleting CMS items (
WEBFLOW_CREATE_COLLECTION_ITEM,WEBFLOW_DELETE_COLLECTION_ITEM) and publishing site changes to production (WEBFLOW_PUBLISH_SITE). - Sanitization: The skill does not mention any sanitization or validation of the data ingested from external pages or CMS collections before it is used.
Audit Metadata