migrate-cloudflare-to-void
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-controlled data (existing project files and source code) to generate new route handlers and configurations, which creates an indirect prompt injection surface.
- Ingestion points: Project configuration files (
package.json,vite.config.*,wrangler.jsonc) and worker source files (src/worker.*). - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" warnings for the agent when it reads and processes these files.
- Capability inventory: The agent is authorized to write new files to the disk, install npm packages, and execute deployment commands (
void deploy). - Sanitization: There is no specified logic for sanitizing or validating the content of the source files before using them to generate the migrated application code.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
voidpackage vianpm. This package is the core framework for the migration target described in the skill. - [COMMAND_EXECUTION]: The migration process involves running common development CLI tools, including
npm install,npm run dev, andvoid deploy.
Audit Metadata