cloudflare
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external project files such as source code and configurations, which could potentially contain malicious instructions targeting the agent's behavior.
- Ingestion points: The agent is instructed to read files including wrangler.jsonc, wrangler.toml, src/index.ts, _headers, and _redirects during its production review and migration workflows.
- Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the ingested project files.
- Capability inventory: The agent can recommend and assist in executing CLI commands for wrangler and cloudflared based on the analysis of these files.
- Sanitization: There is no evidence of sanitization or input validation for the data read from external project files.
Audit Metadata