70High
The skill grants broad Bash access for global package management and
Behavior Analysis
Description verified — behavior matches claim
Claims to do
Webflow CLI Troubleshooter: Diagnose and resolve Webflow CLI issues with diagnostic commands and automated fixes.
Actually does
This skill provides a detailed guide for troubleshooting Webflow CLI issues. It outlines steps to identify problems, run diagnostic commands like `webflow --version`, `webflow auth login`, `webflow library bundle --verbose`, and `webflow library bundle --debug-bundler` using a Bash tool. It also instructs on using `npm` commands for installation/updates and reading configuration files (`webflow.json`, `package.json`) or lock files (`package-lock.json`, `yarn.lock`, `pnpm-lock.yaml`) to analyze and suggest fixes.
Skill Info
Namewebflow/webflow-skills/webflow-cli-troubleshooter
Registrygithub
Versionb6e3c170df8e
PURLpkg:github/webflow/webflow-skills@b6e3c170df8e?skill=webflow-cli-troubleshooter
Stars64
Source
SHA-25670ea0c067cea...
SHA-17331ee77b5ea...
MD59cc6785100d4...
TLSH8702623f8646...
ssdeep192:srsIgKj4...
Size8,383 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
Claude CodeDocs
/plugin marketplace add webflow/webflow-skills/plugin install webflow-cli-troubleshooter@webflow/webflow-skills
CursorDocs
claude-marketplace
https://github.com/webflow/webflow-skills
Skills.shDocs
npx skills add https://github.com/webflow/webflow-skillsAssessments (1)
AI Agent Traps ↗Broad Command Execution & Destructive Actionshighcommand execution
The skill explicitly uses a `Bash` tool to execute a wide range of commands, including global package installations (`npm install -g`), updates (`npm update -g`), and destructive file operations (`rm -rf`). This grants the agent significant control over the host system, enabling potential system compromise, data loss, or supply chain attacks if the agent's reasoning or input handling is exploited.
100% confidence
ALWAYS use Bash tool for all diagnostic operations Executing: npm install -g @webflow/cli Fix: `rm -rf node_modules && npm install`
Authentication Command Initiationinfocredential harvesting
The skill instructs the agent to run `webflow auth login`, which initiates an authentication flow. While a standard CLI command, the method by which the agent handles the subsequent browser prompts or authentication tokens is not detailed, potentially introducing a risk if not securely managed.
80% confidence
Check authentication: `webflow auth login` (if needed) Fix: `webflow auth login`
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/webflow/webflow-skills/webflow-cli-troubleshooter)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/webflow/webflow-skills/webflow-cli-troubleshooter"><img src="https://mondoo.com/ai-agent-security/api/badge/github/webflow/webflow-skills/webflow-cli-troubleshooter.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/webflow/webflow-skills/webflow-cli-troubleshooter.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow