durable-objects

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation provides commands for installing vitest and @cloudflare/vitest-pool-workers. These are standard development dependencies from a trusted organization or well-known testing framework.
  • [PROMPT_INJECTION]: The skill uses a retrieval-augmented instruction set, directing the agent to fetch documentation from external sources to supplement its knowledge. This creates an indirect prompt injection surface.
  • Ingestion points: Instructions in SKILL.md to fetch documentation from developers.cloudflare.com when implementing features.
  • Boundary markers: No specific boundary markers or instructions are provided to distinguish retrieved documentation from system instructions or to mitigate potential instructions embedded in the docs.
  • Capability inventory: The skill involves writing and executing code with capabilities for SQL storage access (storage.sql.exec), network operations (fetch), and project management via wrangler CLI commands.
  • Sanitization: The skill correctly recommends using the zod library for validating incoming request data in its Workers guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 12:23 AM
Security Audit — agent-trust-hub — durable-objects