webflow-code-components
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary content is educational documentation and configuration guidance for Webflow DevLink, containing no malicious instructions.
- [SAFE]: The search script
scripts/search_references.pyproactively validates file paths using resolution and prefix checking to prevent directory traversal vulnerabilities. - [SAFE]: The search utility implements a sanitization layer for processed content, using regular expressions to identify and strip common prompt injection patterns.
- [SAFE]: Security guidance in the documentation correctly identifies risks associated with API tokens and recommends standard industry practices for secret management (e.g., using .gitignore for .env files).
- [SAFE]: The skill utilizes well-known, reputable ecosystem packages and tools without any suspicious or obfuscated execution patterns.
Audit Metadata