cf-cli

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the Cloudflare CLI (cf) from the official npm registry and uses npx to run the wrangler utility, both of which are well-known tools from a well-known service provider.
  • [COMMAND_EXECUTION]: Provides instructions for managing Cloudflare resources, including Worker deployments, DNS, and storage, via the cf and wrangler CLI tools. The instructions include defensive practices such as using the --dry-run flag to preview API requests and --no-browser for secure remote authentication.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided task descriptions to search for relevant CLI commands.
  • Ingestion points: User-defined task strings are passed as arguments to the cf cli search command in SKILL.md.
  • Boundary markers: The instructions recommend wrapping task descriptions in quotes to ensure they are parsed as a single argument.
  • Capability inventory: The skill facilitates modification of Cloudflare infrastructure, including DNS records, D1 databases, KV stores, and R2 buckets.
  • Sanitization: The skill requires using cf cli search and cf schema or --help to verify the structure and safety of commands before they are executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 05:49 PM