webflow-mcp:bulk-cms-update Audit report.

Warnings

• Permission surface may require sandboxing
• Financial research output is not financial advice; require human review before any live investment decision
• No explicit guard against instructions embedded in user-supplied CMS data or imported content; bulk content from untrusted sources could be a prompt injection vector if the model treats field values as instructions.
• SKILL.md assumes Webflow MCP tools are already configured but does not state prerequisites or how to verify the MCP server and authentication are available.
• The provided SKILL.md appears truncated at the final report section, so rollback and report-generation details may be incomplete in the excerpt.
• Publishing wording mentions '*_live endpoints' while the tool list references separate publish actions; ensure the action names match the actual Webflow MCP tool interface.
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Permission surface needs review: secrets or environment access, filesystem or document access
• Stars/forks activity: 114 stars, 18 forks; issue activity unavailable in current metadata
• Permission surface: secrets or environment access, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.