cloudflare-os-operator

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [External Downloads & Remote Code Execution]: The skill utilizes npx cf-os@latest update to fetch and execute the latest version of the cf-os CLI tool. This is a standard mechanism for updating the vendor's management utility and is used within the context of the skill's purpose for deployment orchestration.
  • [Command Execution]: The skill's primary function is to guide an operator through the execution of shell commands using tools like pnpm, git, and wrangler. These commands are used for initializing submodules, managing dependencies, and deploying Cloudflare Workers to the user's account.
  • [Security Guardrails]: The instructions incorporate several security best practices, including:
  • Strict rules against handling or printing secrets.
  • Requirements for sanitized operation records.
  • Mandatory human review and approval checkpoints before any remote mutation (e.g., DNS changes, Worker deployments).
  • Guidance on using narrow Access policies and verifying authenticated identities.
  • [Infrastructure Management]: The skill manages the lifecycle of various Cloudflare products (Workers, KV, R2, AI Gateway). It emphasizes the importance of verifying resource ownership and warns against blind retries or broadening permissions as troubleshooting steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 10:34 PM