cloudflare-one

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references multiple official documentation pages and API schemas hosted on developers.cloudflare.com. These are official resources from a well-known service provider.
  • [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection because it is designed to ingest and act upon data from external and account-specific sources. * Ingestion points: The skill retrieves information from developers.cloudflare.com, Cloudflare API schemas, and existing account resources such as Access policies, Gateway rules, and device profiles. * Boundary markers: There are no specific instructions for the agent to use delimiters or ignore potentially malicious instructions embedded within the retrieved data. * Capability inventory: The agent is authorized to use MCP tools to inspect, create, and modify security policies and network configurations. * Sanitization: The skill does not outline procedures for sanitizing or validating external data before it is processed or used in configuration tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 11:42 PM