skills/iaskshahram/skills/cf-r2-file/Gen Agent Trust Hub

cf-r2-file

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill's core functionality is to upload local files to an external Cloudflare R2 bucket and host them on the vendor-owned domain assets.shahram.dev. This facilitates the transfer of local data to a public internet location as per its stated purpose.
  • [COMMAND_EXECUTION]: The skill utilizes several shell commands to achieve its goals, including wrangler for Cloudflare R2 object management, openssl for generating unique object keys, and pbcopy for system clipboard interaction.
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface where user-supplied input is processed.
  • Ingestion points: User-provided file paths are ingested to be processed by the upload command.
  • Boundary markers: No explicit boundary markers or instruction-ignore warnings are present in the command templates.
  • Capability inventory: The skill possesses capabilities to read local files, perform network uploads via Wrangler, and modify the system clipboard.
  • Sanitization: The skill relies on shell variable quoting (e.g., "$FILE") to handle paths, which is a standard practice but depends on the agent's execution environment to prevent command injection from maliciously crafted filenames.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 12:34 PM