cloudflare-workers-deployments
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes official command-line tools such as cf, wrangler, jq, and gh to interact with Cloudflare and GitHub APIs. This is a primary function of the skill and is accompanied by strict instructions to avoid leaking sensitive tokens or credentials in logs or responses.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or unsafe storage patterns were found. The skill emphasizes least-privilege principles, recommending user-scoped API tokens and advising against the use of local OAuth session JSON files in scripts.
- [DATA_EXFILTRATION]: All network operations target official and well-known Cloudflare or GitHub infrastructure. The skill includes explicit directives to redact sensitive project identifiers, tokens, and emails from any output generated for the user.
- [EXTERNAL_DOWNLOADS]: The skill interacts with trusted domains (cloudflare.com, github.com) for configuration and deployment. It does not attempt to download code from untrusted sources or execute remote scripts via piped shell commands.
- [PROMPT_INJECTION]: The skill processes untrusted data from project configuration files (e.g., package.json, wrangler.toml). This risk surface is mitigated by operational rules requiring user confirmation for all state-changing actions and proactive data redaction.
Audit Metadata