skills/cloudflare/agents/reproduce/Gen Agent Trust Hub

reproduce

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [Indirect Prompt Injection Surface]: The skill extracts information from GitHub issues and user comments to drive its reproduction steps. Because this data comes from external sources, it represents a potential surface for indirect prompt injection. The skill includes instructions to prioritize the issue as the source of truth to mitigate this.
  • [Containerized Shell Operations]: Extensive use of shell commands like npm install, git clone, and wrangler deploy occurs within a container environment. These operations are necessary for scaffolding and testing projects but involve executing code and managing dependencies from external registries.
  • [Automated Cloud Deployment]: The skill leverages temporary account flows to deploy reproduction projects to cloud infrastructure. This involves network activity and the creation of ephemeral live URLs to demonstrate findings.
  • [GitHub API Interaction]: The skill interacts with the GitHub API to post comments and reactions. This functionality uses existing authentication to automate the reporting process.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 06:23 PM
Security Audit — agent-trust-hub — reproduce