cloudflare-zero-trust
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches software packages and security keys from official Cloudflare infrastructure (pkg.cloudflare.com). These downloads originate from well-known and verified services used for secure package distribution.
- [PRIVILEGE_ESCALATION]: Utilizes
sudofor system-level configuration tasks, including adding repository keys to the system keyring, installing software via the apt package manager, and registering thecloudflaredagent as a system service. These actions are necessary for the skill's primary purpose of service deployment. - [PERSISTENCE]: Configures the
cloudflaredagent to run as a systemd service and enables it at boot. This ensures that the secure Zero Trust tunnel is maintained across system restarts, which is the intended functionality of the tool. - [COMMAND_EXECUTION]: Employs the
cloudflaredCLI for tunnel management, DNS configuration, and authentication flows. It also demonstrates how to interact with the Cloudflare API viacurlusing authorization tokens stored in environment variables.
Audit Metadata