devops
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of the Google Cloud SDK via a remote script from 'https://sdk.cloud.google.com'. This is the standard, official installation method for a well-known service.
- [COMMAND_EXECUTION]: The provided Python utility 'scripts/cloudflare_deploy.py' uses subprocess calls to execute the 'wrangler' CLI tool. This is the intended behavior for automating Cloudflare Worker deployments as described in the skill documentation.
- [PROMPT_INJECTION]: Documentation in 'browser-rendering.md' and 'cloudflare-workers-advanced.md' details patterns for building AI-powered web scrapers. These patterns ingest untrusted data from the internet (via Puppeteer/Playwright) and pass it directly to an LLM for processing, which establishes an architectural surface for indirect prompt injection.
Audit Metadata