webflow-cli:code-component
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute Webflow CLI commands and standard build scripts (e.g.,
npm run build,yarn build). These operations are necessary for the primary functionality of building and bundling code components. - [EXTERNAL_DOWNLOADS]: Recommends the installation of the official
@webflow/webflow-clipackage from the public npm registry. This is a legitimate tool provided by the vendor for developer workflows. - [CREDENTIALS_UNSAFE]: The skill manages authentication tokens stored in local
.envfiles (WEBFLOW_WORKSPACE_API_TOKEN). It explicitly instructs the agent to warn users about adding these files to.gitignoreand provides guidance on using secrets management in automated CI/CD pipelines to prevent credential exposure.
Audit Metadata