site
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curl,jq, andrcloneto interact with Cloudflare's API and storage. These operations are core to the skill's stated purpose of publishing sites and managing access policies. All inputs like the application name and email addresses are handled using standard shell validation and JSON-safe interpolation viajq --arg. - [DATA_EXPOSURE]: The skill manages sensitive credentials (API tokens and access keys). It explicitly instructs the user to fetch these from a 1Password vault using a dedicated skill, which is a secure method for handling environment secrets in an agentic context.
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.cloudflare.comand a Cloudflare R2 endpoint. As Cloudflare is a well-known and trusted infrastructure provider, these operations are documented as safe functionality.
Audit Metadata