cf-r2-file
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill's core functionality is to upload local files to an external Cloudflare R2 bucket and host them on the vendor-owned domain
assets.shahram.dev. This facilitates the transfer of local data to a public internet location as per its stated purpose. - [COMMAND_EXECUTION]: The skill utilizes several shell commands to achieve its goals, including
wranglerfor Cloudflare R2 object management,opensslfor generating unique object keys, andpbcopyfor system clipboard interaction. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface where user-supplied input is processed.
- Ingestion points: User-provided file paths are ingested to be processed by the upload command.
- Boundary markers: No explicit boundary markers or instruction-ignore warnings are present in the command templates.
- Capability inventory: The skill possesses capabilities to read local files, perform network uploads via Wrangler, and modify the system clipboard.
- Sanitization: The skill relies on shell variable quoting (e.g.,
"$FILE") to handle paths, which is a standard practice but depends on the agent's execution environment to prevent command injection from maliciously crafted filenames.
Audit Metadata