durable-objects
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing untrusted external data from HTTP requests, which is a standard requirement for web workers.\n
- Ingestion points:
request.json()andurl.searchParamsare used to receive external data inreferences/workers.md.\n - Boundary markers: The skill provides specific examples of schema-based validation using the
zodlibrary to define boundaries for untrusted input.\n - Capability inventory: The skill demonstrates the use of
sql.execfor persistent storage operations inSKILL.mdandreferences/workers.md.\n - Sanitization: Robust input sanitization is modeled through
zodvalidation blocks in thehandleSendMessagepattern.\n- [EXTERNAL_DOWNLOADS]: The skill references official Cloudflare documentation and resources for development guidance.\n - Evidence: Links to
developers.cloudflare.comfor API references, best practices, and testing guides are included throughout the documentation.\n- [COMMAND_EXECUTION]: The skill includes standard CLI commands for managing Cloudflare Worker deployments and resources.\n - Evidence:
references/workers.mdlists development commands such aswrangler dev,wrangler deploy, andwrangler d1 executefor local development and database management.
Audit Metadata