pp-cloudflare
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions provide methods for installing the
cloudflare-pp-cliandcloudflare-pp-mcptools usingnpxandgo install. These installation sources (@mvanhorn/printing-press-libraryandgithub.com/mvanhorn/printing-press-library) are official repositories owned by the skill's author. - [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands through the
cloudflare-pp-clibinary to perform infrastructure management tasks such as zone configuration, worker deployment, and DNS record updates. - [DATA_EXFILTRATION]: The CLI tool documents a
--deliver webhook:<url>feature that enables the agent to POST command results directly to a remote HTTP endpoint. While this is a functional feature of the tool for data routing, it provides a mechanism for transmitting Cloudflare account data to external services. - [CREDENTIALS_UNSAFE]: The skill provides instructions for Cloudflare API token management, including the use of the
CLOUDFLARE_API_TOKENenvironment variable and local storage via theauth set-tokencommand. It utilizes standard placeholders for sensitive inputs.
Audit Metadata