cloudflare-worker-base
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates various development tasks using shell commands, including
wranglerfor platform interaction,npmfor package management, andgitfor version control. These commands are typical for managing Cloudflare Workers projects.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of standard development packages from the npm registry, such as thehonorouting framework and Cloudflare's officialwranglerCLI and Vite plugin. These are well-known and trusted resources.\n- [INDIRECT_PROMPT_INJECTION]: Thecloudflare-debugagent (inagents/cloudflare-debug.md) ingests live logs from the worker environment vianpx wrangler tail, which could contain untrusted data from external requests.\n - Ingestion points: Data stream from
npx wrangler tailcaptured inagents/cloudflare-debug.md.\n - Boundary markers: The instructions do not define clear boundaries or delimiters to separate log content from the agent's internal processing logic.\n
- Capability inventory: The agent has access to
Bash,Read, andWebFetchtools, allowing it to perform a variety of system and network tasks.\n - Sanitization: There is no explicit sanitization, validation, or filtering of the log data before it is incorporated into the final debugging report.
Audit Metadata