The Agent Skills Directory

[COMMAND_EXECUTION]: The documentation includes standard development and testing commands (npm install, npx vitest, wrangler dev) which are expected for the skill's primary purpose of teaching Cloudflare Workers development.
[CREDENTIALS_UNSAFE]: The skill correctly instructs developers to manage sensitive information using wrangler secret put rather than hardcoding credentials in configuration files or source code. It uses safe placeholders like API_KEY and DATABASE_URL for demonstration purposes.
[DATA_EXPOSURE]: The skill uses console.error and console.log for debugging and structured logging. While it mentions logging to external services, it provides patterns for sanitization and structured metadata rather than logging raw sensitive objects.
[INDIRECT_PROMPT_INJECTION]: The skill demonstrates processing external data (e.g., request.json()). It mitigates risks by recommending strict schema validation using the zod library and proper error handling for malformed inputs.
[EXTERNAL_DOWNLOADS]: The skill references official Cloudflare documentation and standard development tools. All referenced GitHub links (lambrospetrou/durable-utils, cloudflare/actors) are reputable and relevant to the technical implementation of Durable Objects migrations.

durable-objects