cloudflare-python-workers

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a legitimate technical guide for Cloudflare Python Workers development. It provides accurate instructions for project initialization, configuration, and deployment using standard industry tools.
  • [EXTERNAL_DOWNLOADS]: The instructions reference official installation methods for uv (a trusted Python package manager from Astral) and workers-py/pywrangler (official Cloudflare tools). These downloads originate from well-known, trusted sources and are essential for the skill's stated purpose.
  • [COMMAND_EXECUTION]: The provided bash commands (e.g., uv tool install, pywrangler dev, pywrangler deploy) are standard operations for managing Cloudflare Workers. They do not exhibit any signs of command injection or malicious intent.
  • [DATA_EXFILTRATION]: The skill demonstrates how to use Cloudflare bindings (D1, KV, R2, AI) and the fetch API. These examples are for legitimate application functionality and do not contain patterns suggesting unauthorized data collection or exfiltration.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides templates that process HTTP request data (e.g., request.json()). While this represents a typical web application attack surface, the templates follow safe development practices and do not contain exploitable injection vulnerabilities in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 06:54 AM
Security Audit — agent-trust-hub — cloudflare-python-workers