webflow-code-component:deploy-guide

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is coherent with its stated purpose: it provides a deployment guide and workflow for Webflow Code Components, leveraging the official Webflow CLI and standard credential flows (env vars or tokens) without introducing unfamiliar or unverifiable binaries. The security posture is generally acceptable for a developer tooling guide, though there is moderate risk around credential exposure via logs or misconfigured CI environments. Recommend best practices for secret management (masking tokens in logs, scope-limiting tokens, using repository secrets in CI) and clarifying that tokens should never be committed or printed to output streams.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 06:35 PM
Package URL
pkg:socket/skills-sh/webflow%2Fwebflow-skills%2Fwebflow-code-componentdeploy-guide%2F@c1ed5859bb9dfe1cc5509659afa9ccb3fada3a1c
Security Audit — socket — webflow-code-component:deploy-guide