cloudflare-one-migrations
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Data Ingestion Surface]: The skill is designed to process configuration exports and logs from third-party SASE and VPN platforms (Zscaler, Palo Alto). Ingesting untrusted external data is a known surface for indirect prompt injection; however, this is necessary for the skill's primary function of policy mapping. The risk is minimized as the skill does not grant the agent high-privilege tool access or the ability to execute arbitrary code or network operations.- [Verified External References]: The skill frequently references official Cloudflare documentation and API schemas. These references target the vendor's own verified developer domains to ensure accurate migration patterns and do not involve any third-party code execution.
Audit Metadata