custom-code-management
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements management of Webflow site scripts using vendor-specific MCP tools (
data_scripts_tool,data_sites_tool).\n- [COMMAND_EXECUTION]: While the skill manages code execution on the end-user's Webflow site, all operations are performed through validated tools with character limits and syntax checks (removing<script>tags).\n- [DATA_EXPOSURE]: No hardcoded credentials or access to sensitive local file paths were detected. The skill operates within the scoped context of the Webflow platform.\n- [SAFE]: Destructive actions, specifically thedelete_all_site_scriptsaction, are guarded by mandatory user confirmation steps ("warn: removes ALL scripts" and requiring the "delete all" confirmation phrase).
Audit Metadata