webflow-cli:devlink

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs the agent to execute CLI commands that accept --api-token / --site-id overrides, shows example commands with literal tokens, and may prompt the user to supply tokens, which requires the LLM to include secret values verbatim in generated commands or outputs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly runs webflow devlink sync to fetch components from a Webflow site (overridable with --site-id/--api-token) and then uses Read/Glob to examine the synced/generated files, so it ingests and acts on third-party, user-generated site content from the Webflow API as part of its workflow.