cloudflare-one
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- Safe Secret Handling: The skill explicitly instructs the agent to read service-token credentials from a configured secret store or environment variables and forbids asking users to paste secrets into chat or logging them.
- Access Control Guidance: It provides detailed instructions on using Cloudflare Access service tokens, including specific header requirements (
CF-Access-Client-IdandCF-Access-Client-Secret) and policy configurations, adhering to standard security practices for non-browser clients. - Controlled Feedback Process: The skill implements a structured workflow for submitting public feedback via GitHub issues, requiring explicit user approval and the removal of sensitive information (PII, credentials, hostnames) before any external transmission.
- Least Privilege and Staging: Instructions emphasize starting risky changes in a disabled or scoped pilot group and using narrowly scoped tokens, following the principle of least privilege.
- Trusted Documentation: All documentation and reference links target official Cloudflare developer resources.
Audit Metadata