cloudflare-python-workers
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The worker templates ingest untrusted data from external sources.
- Ingestion points: The code in templates/src/entry.py and templates/workflow-example.py parses data from request.json() and request.url.
- Boundary markers: No explicit prompt boundary markers or instruction-ignoring delimiters are used in the templates.
- Capability inventory: Templates in templates/src/entry.py and templates/wrangler.jsonc demonstrate access to Cloudflare bindings including SQL databases (D1), Key-Value storage (KV), and Workers AI.
- Sanitization: No input validation or sanitization is implemented in the boilerplate code.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and configuration guidelines from Cloudflare's official GitHub and developer portal.
- [DYNAMIC_EXECUTION]: The skill facilitates the deployment of Python code to the Cloudflare Workers environment, which utilizes Pyodide to run Python within a WebAssembly-based runtime on the edge.
Audit Metadata