agents-sdk
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill instructs the agent to install the 'agents' package via npm and fetch documentation from 'https://github.com/cloudflare/agents'. Description: These sources are not on the pre-approved Trusted Sources list. Finding downgraded from MEDIUM to LOW because the installation is essential to the primary purpose of using the SDK. Mitigation: Verify package and repository authenticity.
- [PROMPT_INJECTION] (LOW): Indirect Prompt Injection surface via unverified documentation retrieval. 1. Ingestion points: 'https://github.com/cloudflare/agents/tree/main/docs'. 2. Boundary markers: Absent; no delimiters or warnings to ignore instructions in external docs. 3. Capability inventory: SQL execution (this.sql), task scheduling (this.schedule), and workflow management (runWorkflow). 4. Sanitization: Absent; external documentation is treated as an authoritative source of implementation rules.
Audit Metadata