durable-objects
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation provides commands for installing
vitestand@cloudflare/vitest-pool-workers. These are standard development dependencies from a trusted organization or well-known testing framework. - [PROMPT_INJECTION]: The skill uses a retrieval-augmented instruction set, directing the agent to fetch documentation from external sources to supplement its knowledge. This creates an indirect prompt injection surface.
- Ingestion points: Instructions in
SKILL.mdto fetch documentation fromdevelopers.cloudflare.comwhen implementing features. - Boundary markers: No specific boundary markers or instructions are provided to distinguish retrieved documentation from system instructions or to mitigate potential instructions embedded in the docs.
- Capability inventory: The skill involves writing and executing code with capabilities for SQL storage access (
storage.sql.exec), network operations (fetch), and project management viawranglerCLI commands. - Sanitization: The skill correctly recommends using the
zodlibrary for validating incoming request data in its Workers guidelines.
Audit Metadata