cloudflare-stream
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural and implementation guidelines for Cloudflare Stream integrations, emphasizing security best practices such as secret management, signature verification, and least privilege.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No credentials or sensitive data are exposed. The instructions explicitly warn against committing, exposing, or sending privileged credentials (API tokens, signing keys, webhook secrets) to client-side environments.
- [EXTERNAL_DOWNLOADS]: All external references point to official Cloudflare documentation and API references. Cloudflare is a well-known service, and these references are considered safe.
- [COMMAND_EXECUTION]: The skill does not contain shell commands or scripts that perform unauthorized or dangerous operations. It provides guidance on using standard Cloudflare SDKs or REST APIs.
- [INDIRECT_PROMPT_INJECTION]: The skill includes defensive instructions to verify webhook signatures against raw bodies and use constant-time comparisons, mitigating potential injection or spoofing risks at the integration boundary.
Audit Metadata