webflow-mcp:custom-code-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow explicitly calls Webflow MCP data tools (e.g., data_scripts_tool actions list_registered_scripts, list_applied_scripts, and get_page_script) to fetch and preview site/page inline scripts — content that can be arbitrary, user- or third-party‑provided code and text that the agent is expected to read and use to decide on add/update/delete actions.