cloudflare-one-migrations
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFENO_CODEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions are limited to technical guidance for network security migrations and do not contain any malicious patterns or commands.
- [NO_CODE]: This skill is entirely documentation-based and does not include any scripts or executable files.
- [EXTERNAL_DOWNLOADS]: The skill references official Cloudflare documentation, developer guides, and reference architectures. These originate from a trusted organization and are considered safe.
- [INDIRECT_PROMPT_INJECTION]: The workflow involves analyzing external data exports and logs from third-party vendors, which is an inherent attack surface for indirect prompt injection. 1. Ingestion points: Third-party vendor exports (e.g., ZIA/ZPA/Palo Alto configs and logs) mentioned in the workflow and exports section. 2. Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore potentially malicious content within these exports. 3. Capability inventory: The skill itself is purely markdown-based and does not provide scripts or direct command execution capabilities. 4. Sanitization: There are no instructions for sanitizing or validating the content of the ingested exports before analysis.
Audit Metadata