workers-best-practices
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill exclusively references official Cloudflare resources (developers.cloudflare.com) and the verified @cloudflare/workers-types package, adhering to the trusted source guidelines.
- [EXTERNAL_DOWNLOADS]: The skill fetches current type definitions from the npm registry using
npm pack. This is a standard procedure for obtaining the latest API signatures from a trusted vendor to ensure code correctness. - [COMMAND_EXECUTION]: Employs standard shell utilities and developer tools including
npm,npx,tar, andmkdir. These are used for administrative tasks like extracting types and running industry-standard linters (ESLint, Oxlint) to validate code against best practices. - [SAFE]: The documentation explicitly warns against common security pitfalls, such as hardcoding secrets and using non-cryptographically secure random number generators, and provides correct patterns using platform-native security APIs.
Audit Metadata