webflow-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Bash and TypeScript scripts to collect system metadata, such as Node.js and npm versions, OS details, and SDK installation status.
- [DATA_EXFILTRATION]: The script accesses sensitive local files including
.env,.env.local, and.env.production, as well as application logs in thelogs/directory. - Evidence: The Bash script uses
sedto redact values in environment files (sed 's/=.*/=***REDACTED***/') before including them in the diagnostic bundle. - Evidence: It collects the last 50 lines of error-related logs to assist in debugging.
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to official Webflow infrastructure to verify connectivity and platform status.
- Evidence: Uses
curlto reachapi.webflow.comfor token validation and rate limit checks. - Evidence: Fetches service status from
status.webflow.com.
Audit Metadata