deploying-payload-to-cloudflare

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill provides technical instructions and scripts for optimizing a deployment to Cloudflare Workers.
  • [COMMAND_EXECUTION]: The provided build-worker.sh script executes standard shell commands (rm, mkdir, cp, perl) to manage build artifacts and modify import paths. These operations are restricted to the .open-next build directory and are consistent with the skill's stated purpose of bypassing Cloudflare's bundle size limits.
  • [EXTERNAL_DOWNLOADS]: The script utilizes npx to run the opennextjs-cloudflare tool. This is a well-known community utility used to adapt Next.js applications for the Cloudflare environment.
  • [REMOTE_CODE_EXECUTION]: While the script dynamically modifies code via perl regex patching, this occurs during the build phase and is directed at replacing absolute paths with relative stubs (empty_wasm.js, empty_lib.js). This is a documented workaround for making bundled JavaScript portable across different execution environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 06:07 PM