webflow-common-errors
Warn
Audited by Snyk on Mar 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). This skill's SKILL.md explicitly instructs the agent to fetch and inspect Webflow API and status endpoints (e.g., curl https://api.webflow.com/v2/sites, webflow.collections.items.listItems, and https://status.webflow.com), which involves reading untrusted/user-generated third-party content (site/collection/item data) and using it to drive discovery, ID selection, and create/update actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata