ClawHub
Back to skill

Security audit

Webflow

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Webflow guidance skill with expected local preference memory and third-party integration examples, but users should handle stored preferences, tokens, forms, analytics, and embeds carefully.

Before installing, be aware that this skill may create and read a local ~/webflow/memory.md preference file. Treat Webflow bearer tokens as secrets, and review privacy, cookie consent, and vendor handling before adding forms, analytics, chat widgets, CRM webhooks, or other third-party embeds to a live site.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (7)

Hidden Instructions

High
Category
Prompt Injection
Content
**Connect to CRM without Zapier:**
```html
<!-- Custom form action -->
<form action="https://your-crm.com/api/leads" method="POST">
  <!-- Hidden field for API routing -->
  <input type="hidden" name="source" value="webflow-landing">
Confidence
70% confidence
Finding
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly instructs reading and storing user preferences in a persistent local file under the user's home directory, but it does not provide any user-facing notice, consent flow, or retention guidance. This creates a privacy and transparency issue because users may unknowingly have profile data persisted across sessions, and other local processes or later runs could access that data.

External Transmission

Medium
Category
Data Exfiltration
Content
## Headless API

**Endpoint:** `https://api.webflow.com/v2/collections/{collection_id}/items`

**Authentication:** Bearer token from Site Settings → Integrations
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The guidance explicitly directs users to send form submissions to webhook and CRM endpoints, which commonly include personal data such as names, emails, and message contents, but it provides no warning about consent, privacy notices, retention, or secure handling. In a web-building skill, this omission can lead implementers to deploy third-party data flows without considering legal and security obligations, increasing the risk of inadvertent data exposure or noncompliant collection.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The analytics, chat widget, and similar third-party embed instructions encourage deployment of tracking technologies and external scripts without noting that they may collect user identifiers, behavior, or conversation data. In practice, this can cause site owners to add monitoring and support tooling without implementing consent controls, vendor review, or disclosure, creating privacy and compliance risk.

Missing User Warnings

Low
Confidence
88% confidence
Finding
The skill directs the agent to create a directory in the user's home folder on first use, which is a filesystem modification performed without advance warning or confirmation. While the action is low risk by itself, silent creation of local directories weakens user control and can normalize unauthorized file-system side effects.

Missing User Warnings

Low
Confidence
90% confidence
Finding
This markdown file documents using a bearer token from Webflow site settings, which is a sensitive credential. The surrounding guidance does not include any warning about keeping the token secret, avoiding client-side exposure, or storing it securely.

Static analysis

No suspicious patterns detected.