The Agent Skills Directory

[COMMAND_EXECUTION]: The skill facilitates the execution of the official webflow CLI via the Bash tool to perform synchronization and authentication tasks. These operations are essential to the skill's primary purpose of component exporting.
[EXTERNAL_DOWNLOADS]: The instructions guide the user to install the official @webflow/webflow-cli package from the NPM registry. This is a trusted vendor resource provided by Webflow and does not present a security risk in this context.
[SAFE]: The skill accesses project-specific sensitive files like .env and webflow.json to manage authentication tokens (WEBFLOW_SITE_API_TOKEN) and site identifiers. As these are vendor-mandated resources for the CLI's operation and no unauthorized exfiltration patterns were detected, this behavior is considered safe within the intended developer workflow.
[SAFE]: No evidence of obfuscation, persistence mechanisms, or malicious prompt injection was found. The instructions regarding tool usage (e.g., 'ALWAYS use Bash tool') are structural requirements for the agent's operation and do not attempt to bypass safety constraints.

webflow-cli:devlink