cloudflare-workers
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install official development tools via npm.
- Evidence: Installation of 'wrangler' and usage of 'create-cloudflare' scaffolding in SKILL.md.
- [INDIRECT_PROMPT_INJECTION]: The code templates describe Worker logic that processes untrusted HTTP request data which is then used in storage or network operations.
- Ingestion points:
request.json()and header retrieval in Worker examples (SKILL.md). - Capability inventory: The examples demonstrate network communication via
fetch(), key-value storage via KV, and database access via D1. - Boundary markers: None provided in the simplified code templates.
- Sanitization: Not explicitly implemented in the example logic.
- [SAFE]: The documentation adheres to security best practices by recommending the use of
wrangler secretcommands and environment variables for managing sensitive tokens rather than hardcoding credentials.
Audit Metadata