webflow-code-component:component-scaffold
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands including 'npm install' for dependency management and 'npx webflow' for library sharing. These operations are restricted to the vendor's own CLI tools and standard package management as described in SKILL.md.
- [EXTERNAL_DOWNLOADS]: The skill installs several Node.js packages from the '@webflow' scope. As these packages originate from the verified author of the skill and official repositories, they are documented as standard vendor resources.
- [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it interpolates user-controlled strings (component names and descriptions) into code files and terminal commands.
- Ingestion points: User-provided component name, description, and property names in Phase 1.
- Boundary markers: The skill does not explicitly use delimiters to isolate user input within the generated code templates in Phase 3.
- Capability inventory: Capability to create directories and files on the local filesystem, and execute shell commands via 'npm' and 'npx' (SKILL.md).
- Sanitization: The skill includes explicit instructions for the agent to validate that component names follow PascalCase and contain only alphanumeric characters, which serves as a mitigation against simple command injection.
Audit Metadata