gateway-workers
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Data Ingestion Consideration]: The skill describes building Workers that process external HTTP request data (via the
requestobject) and identity context. In the context of middleware development, these inputs are untrusted and represent a surface for indirect prompt injection or logic manipulation. The instructions appropriately suggest best practices, such as separate error handling for identity lookups and guarding optional posture values. - [Network and Continuation Capabilities]: The instructions detail the use of
fetch()for subrequests andnext()for request continuation. While these are powerful capabilities that allow the Worker to interact with external origins, they are core features of the Cloudflare Workers platform. The skill provides clear guidance on the limitations of these tools, such as howfetch()creates independent subrequests that do not inherit the user's Gateway policies. - [Official Vendor Documentation]: The skill makes extensive use of links to
developers.cloudflare.comto provide necessary implementation details. These references are used to ensure the developer uses the most current API payloads and limit configurations from the official vendor source.
Audit Metadata