wrangler
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch the latest information from external Cloudflare documentation and local configuration schemas to guide command generation and execution. This creates an attack surface where compromised external content could influence agent behavior.
- Ingestion points: External URLs
https://developers.cloudflare.com/workers/wrangler/andhttps://developers.cloudflare.com/workers/, and local filenode_modules/wrangler/config-schema.json(SKILL.md). - Boundary markers: None provided in the instructions to the agent.
- Capability inventory: Execution of shell commands via
wrangler,npm, andnpx; network requests viacurl(SKILL.md). - Sanitization: No explicit sanitization or validation of the retrieved content is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
wranglerCLI and associated development tools from the official npm registry. These originate from Cloudflare, a well-known service. - [COMMAND_EXECUTION]: The skill provides numerous examples and instructions for executing shell commands, including project initialization, deployment, database management, and secret handling. It includes proactive warnings against unsafe secret management practices.
Audit Metadata