Skills
Navigate
skills/biw/skills/setup-cloudflare-pr-previews/Gen Agent Trust Hub

setup-cloudflare-pr-previews

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a Python script (render_templates.py) to render parameterized templates into a scratch directory for integration into the target repository.
  • Evidence: python3 <skill-dir>/scripts/render_templates.py usage in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: The GitHub Action template (cleanup-preview-db.yml.tmpl) fetches official and well-known actions for environment setup.
  • Evidence: References to actions/checkout@v4, pnpm/action-setup@v4, and actions/setup-node@v4.
  • [COMMAND_EXECUTION]: The skill provides templates for GitHub Actions using the pull_request_target trigger. It mitigates security risks associated with this trigger by checking out the trusted base branch and applying minimal permissions.
  • Evidence: ref: ${{ github.event.pull_request.base.ref }} and permissions: contents: read in assets/cleanup-preview-db.yml.tmpl.
  • [COMMAND_EXECUTION]: The deployment and cleanup scripts implement input sanitization for branch names to prevent injection attacks when interacting with the file system or Cloudflare D1 databases.
  • Evidence: The sanitize_branch_for_db and sql_escape functions in the .sh.tmpl assets.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:49 PM
Security Audit — agent-trust-hub — setup-cloudflare-pr-previews