cf-cli
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Cloudflare CLI (cf) from the official npm registry and uses npx to run the wrangler utility, both of which are well-known tools from a well-known service provider.
- [COMMAND_EXECUTION]: Provides instructions for managing Cloudflare resources, including Worker deployments, DNS, and storage, via the cf and wrangler CLI tools. The instructions include defensive practices such as using the --dry-run flag to preview API requests and --no-browser for secure remote authentication.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided task descriptions to search for relevant CLI commands.
- Ingestion points: User-defined task strings are passed as arguments to the
cf cli searchcommand inSKILL.md. - Boundary markers: The instructions recommend wrapping task descriptions in quotes to ensure they are parsed as a single argument.
- Capability inventory: The skill facilitates modification of Cloudflare infrastructure, including DNS records, D1 databases, KV stores, and R2 buckets.
- Sanitization: The skill requires using
cf cli searchandcf schemaor--helpto verify the structure and safety of commands before they are executed.
Audit Metadata