cloudflare-worker-base

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates various development tasks using shell commands, including wrangler for platform interaction, npm for package management, and git for version control. These commands are typical for managing Cloudflare Workers projects.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of standard development packages from the npm registry, such as the hono routing framework and Cloudflare's official wrangler CLI and Vite plugin. These are well-known and trusted resources.\n- [INDIRECT_PROMPT_INJECTION]: The cloudflare-debug agent (in agents/cloudflare-debug.md) ingests live logs from the worker environment via npx wrangler tail, which could contain untrusted data from external requests.\n
  • Ingestion points: Data stream from npx wrangler tail captured in agents/cloudflare-debug.md.\n
  • Boundary markers: The instructions do not define clear boundaries or delimiters to separate log content from the agent's internal processing logic.\n
  • Capability inventory: The agent has access to Bash, Read, and WebFetch tools, allowing it to perform a variety of system and network tasks.\n
  • Sanitization: There is no explicit sanitization, validation, or filtering of the log data before it is incorporated into the final debugging report.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 11:45 AM