cloudflare-d1
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions and the setup script (
assets/d1-setup-migration.sh) utilizenpx wranglerto manage Cloudflare resources. This involves downloading the official Wrangler CLI from the npm registry. - [PROMPT_INJECTION]: The skill provides templates for processing untrusted data from web requests (JSON bodies, URL parameters, and query strings) which are then used in database queries, creating a surface for indirect prompt injection or SQL injection.
- Ingestion points: Untrusted data enters the context via
c.req.json(),c.req.param(), andc.req.query()inassets/d1-worker-queries.ts. - Boundary markers: Not applicable to these code templates.
- Capability inventory: The skill uses
c.env.DB.prepare().run(),.all(), and.batch()for database reads and writes. - Sanitization: The skill includes extensive documentation and specific examples in
references/best-practices.mdon using prepared statements with.bind()to mitigate injection risks and provides input validation patterns.
Audit Metadata