skills/mukul975/anthropic-cybersecurity-skills/deploying-cloudflare-access-for-zero-trust/Gen Agent Trust Hub
deploying-cloudflare-access-for-zero-trust
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
cloudflaredinstallation package from Cloudflare's official GitHub repository (github.com/cloudflare/cloudflared). This is a trusted source and the recommended method for obtaining the tool. - [COMMAND_EXECUTION]: The instructions utilize system commands (via
sudo) to install thecloudflaredpackage, manage its background service, and update system CA certificates. These are standard administrative operations required for the deployment of network security infrastructure. - [DATA_EXFILTRATION]: The skill's audit scripts (
agent.py,process.py) and command examples interact with official Cloudflare, Okta, and CrowdStrike APIs to manage identity-aware access and posture checks. These operations are transparent, authenticated, and consistent with the skill's stated purpose of Zero Trust management. - [CREDENTIALS_UNSAFE]: Documentation examples use descriptive placeholders (e.g.,
OKTA_CLIENT_SECRET,AZURE_APP_CLIENT_SECRET,CS_API_CLIENT_SECRET) to represent sensitive keys. No actual credentials or secrets are hardcoded in the skill's files.
Audit Metadata