durable-objects
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing development dependencies such as
vitestand@cloudflare/vitest-pool-workersfrom the npm registry. It also references official Cloudflare documentation and trusted open-source repositories.- [INDIRECT_PROMPT_INJECTION]: The skill documents how to handle untrusted data from web requests inreferences/workers.md. It mitigates this attack surface by explicitly recommending and demonstrating the use of thezodlibrary for schema validation and input sanitization.- [COMMAND_EXECUTION]: Implementation examples for Durable Object storage inSKILL.mdandreferences/rules.mduse parameterized SQL queries (?placeholders). This is the correct pattern to prevent SQL injection vulnerabilities.- [CREDENTIALS_UNSAFE]: The skill demonstrates secure secret management using thewranglerCLI to set environment variables, avoiding the risk of hardcoded credentials in source code.
Audit Metadata