wrangler
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch documentation and configuration schemas from official Cloudflare sources (developers.cloudflare.com) and local node_modules. These are trusted or well-known sources intended for retrieving accurate CLI usage and schema validation.
- [COMMAND_EXECUTION]: Provides standard commands for the Cloudflare Wrangler CLI (e.g., wrangler deploy, wrangler dev, wrangler secret put). These commands are consistent with the skill's stated purpose of managing Cloudflare Workers and related services.
- [CREDENTIALS_UNSAFE]: Explicitly includes security best practices for handling secrets, such as using interactive prompts, piping from files, or using encrypted stores rather than hardcoding them in commands or configuration files. It also correctly advises the use of .dev.vars for local development secrets.
- [EXTERNAL_DOWNLOADS]: Recommends installing legitimate, well-known development packages such as 'wrangler' and '@cloudflare/vitest-pool-workers' from the official npm registry.
- [DATA_EXFILTRATION]: No suspicious network patterns or unauthorized access to sensitive files were detected. The use of local state directories and official API endpoints is standard for the documented toolset.
Audit Metadata