agents-sdk
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Skill references and recommends fetching updated documentation from Cloudflare's official GitHub repositories and documentation sites.
- [COMMAND_EXECUTION]: Provides instructions for standard development environment setup and dependency installation using the npm package manager.
- [DYNAMIC_EXECUTION]: Describes an experimental 'Code Mode' feature that allows for the generation and execution of JavaScript to orchestrate multi-tool workflows within the agent's runtime environment, including recommendations for security filtering.
- [INDIRECT_PROMPT_INJECTION]: Ingests and processes untrusted data from external sources such as emails and chat messages; identifies this as an attack surface and provides implementation patterns for security sanitization and domain blocking.
Audit Metadata