pp-cloudflare

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions provide methods for installing the cloudflare-pp-cli and cloudflare-pp-mcp tools using npx and go install. These installation sources (@mvanhorn/printing-press-library and github.com/mvanhorn/printing-press-library) are official repositories owned by the skill's author.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands through the cloudflare-pp-cli binary to perform infrastructure management tasks such as zone configuration, worker deployment, and DNS record updates.
  • [DATA_EXFILTRATION]: The CLI tool documents a --deliver webhook:<url> feature that enables the agent to POST command results directly to a remote HTTP endpoint. While this is a functional feature of the tool for data routing, it provides a mechanism for transmitting Cloudflare account data to external services.
  • [CREDENTIALS_UNSAFE]: The skill provides instructions for Cloudflare API token management, including the use of the CLOUDFLARE_API_TOKEN environment variable and local storage via the auth set-token command. It utilizes standard placeholders for sensitive inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 08:13 AM
Security Audit — agent-trust-hub — pp-cloudflare