Workers Development
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for building applications that process untrusted data from HTTP requests while maintaining capabilities for persistent storage and network operations.\n
- Ingestion points: SKILL.md and examples/fetch-handler-patterns.js demonstrate ingestion of external data via request.json(), request.formData(), and request.text().\n
- Capability inventory: The documentation covers powerful capabilities including writing to KV namespaces (env.KV.put), executing SQL via D1 (env.DB.run), writing to R2 buckets (env.R2.put), and making outbound HTTP requests (fetch).\n
- Boundary markers: The skill suggests general input validation and provides structured error handling patterns to manage execution flow.\n
- Sanitization: The skill proactively encourages security best practices, such as using prepared statements with bind() to prevent SQL injection and utilizing Secrets for sensitive credentials.
Audit Metadata