webflow-common-errors
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill uses
curlto perform network requests to official Webflow infrastructure (api.webflow.com,status.webflow.com). These operations are consistent with the skill's purpose of diagnosing API status and debugging integration issues with a well-known service. - [CREDENTIALS_UNSAFE]: Access tokens are managed through the
$WEBFLOW_API_TOKENenvironment variable rather than being hardcoded. The diagnostic commands provided guide the user to verify token length and connectivity safely. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it ingests data from external API responses.
- Ingestion points: Network responses from
api.webflow.com(SKILL.md). - Boundary markers: Not present in the provided shell command examples.
- Capability inventory:
Bash(curl:*),Read, andGreptools are enabled in the skill frontmatter. - Sanitization: The diagnostic examples do not include explicit sanitization of the API response bodies. However, the source (Webflow) is a well-known service.
Audit Metadata