cloudflare-os-operator
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [External Downloads & Remote Code Execution]: The skill utilizes
npx cf-os@latest updateto fetch and execute the latest version of thecf-osCLI tool. This is a standard mechanism for updating the vendor's management utility and is used within the context of the skill's purpose for deployment orchestration. - [Command Execution]: The skill's primary function is to guide an operator through the execution of shell commands using tools like
pnpm,git, andwrangler. These commands are used for initializing submodules, managing dependencies, and deploying Cloudflare Workers to the user's account. - [Security Guardrails]: The instructions incorporate several security best practices, including:
- Strict rules against handling or printing secrets.
- Requirements for sanitized operation records.
- Mandatory human review and approval checkpoints before any remote mutation (e.g., DNS changes, Worker deployments).
- Guidance on using narrow Access policies and verifying authenticated identities.
- [Infrastructure Management]: The skill manages the lifecycle of various Cloudflare products (Workers, KV, R2, AI Gateway). It emphasizes the importance of verifying resource ownership and warns against blind retries or broadening permissions as troubleshooting steps.
Audit Metadata