deploy-cloudflare-temp-email
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone code from a third-party GitHub repository (github.com/dreamhunter2333/cloudflare_temp_email) that is not an official vendor or trusted organization.
- [COMMAND_EXECUTION]: The deployment instructions require the agent to execute various shell commands, including git operations and Cloudflare deployment CLI tools, as documented in the external project.
- [DATA_EXFILTRATION]: The skill uses the CLOUDFLARE_API_TOKEN environment variable. Executing instructions from an external, non-trusted source while this token is present creates a potential path for credential exfiltration.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection. Ingestion points: Cloned source code and documentation from the dreamhunter2333 repository. Boundary markers: None present to instruct the agent to ignore instructions within the external data. Capability inventory: Access to shell execution and Cloudflare deployment tools. Sanitization: No validation or filtering is applied to the external content before the agent processes it for deployment steps.
Audit Metadata