cloudflare-worker-base
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes multiple companion agents and automated commands that execute shell operations to manage the application lifecycle.
agents/cloudflare-deploy.mdandcommands/deploy.mdautomate the build and deployment process usingnpm run build,git commit, andnpx wrangler deploy.agents/worker-scaffold.mdandcommands/init.mdinitialize new projects by runningnpm installand creating directories/files.agents/d1-migration.mdmanages database schemas usingnpx wrangler d1 execute.- [INDIRECT_PROMPT_INJECTION]: The
cloudflare-debugagent includes a diagnostic step that tails real-time Worker logs, which represents an attack surface for indirect prompt injection. - Ingestion points: Untrusted data from web requests logged by the Worker is ingested into the agent context via
npx wrangler tailinagents/cloudflare-debug.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded in log data.
- Capability inventory: The agent possesses
BashandWritecapabilities, allowing it to execute commands or modify files based on its interpretation of the log content. - Sanitization: There is no evidence of filtering or sanitizing the log output before it is processed by the agent.
Audit Metadata