cloudflare-d1
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides TypeScript templates that ingest untrusted data from API requests to interact with databases, creating a potential surface for indirect injection if processed data contains malicious instructions.
- Ingestion points:
templates/d1-worker-queries.tsincludes code for reading JSON bodies and URL parameters fromc.reqin Hono applications. - Boundary markers: The provided templates do not include specific boundary markers or 'ignore' instructions for the data being interpolated into queries.
- Capability inventory: The skill allows for full CRUD (Create, Read, Update, Delete) operations on Cloudflare D1 databases via the Workers API.
- Sanitization: The skill strongly recommends and demonstrates the use of
.prepare().bind()for all queries involving user input, which effectively mitigates SQL injection risks.
Audit Metadata