cloudflare
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto fetch and execute the@useclawlink/clipackage from the official NPM registry. This is the legitimate tool provided by the author for the skill's functionality. - [COMMAND_EXECUTION]: Shell commands are used to invoke the vendor CLI for performing Cloudflare operations such as listing DNS records, managing zones, and configuring firewall rules. These commands are transparently documented and match the stated purpose of the skill.
- [CREDENTIALS_UNSAFE]: The skill notes that authentication results in a local credential file being stored at
~/.clawlink/credentials.json. This is standard practice for CLI-based authentication flows and is distinct from the unauthorized harvesting of system secrets.
Audit Metadata