durable-objects

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing development dependencies such as vitest and @cloudflare/vitest-pool-workers from the npm registry. It also references official Cloudflare documentation and trusted open-source repositories.- [INDIRECT_PROMPT_INJECTION]: The skill documents how to handle untrusted data from web requests in references/workers.md. It mitigates this attack surface by explicitly recommending and demonstrating the use of the zod library for schema validation and input sanitization.- [COMMAND_EXECUTION]: Implementation examples for Durable Object storage in SKILL.md and references/rules.md use parameterized SQL queries (? placeholders). This is the correct pattern to prevent SQL injection vulnerabilities.- [CREDENTIALS_UNSAFE]: The skill demonstrates secure secret management using the wrangler CLI to set environment variables, avoiding the risk of hardcoded credentials in source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 03:57 PM
Security Audit — agent-trust-hub — durable-objects