workers-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Resource Retrieval from Official Sources: The skill suggests fetching data from Cloudflare's official developer documentation and the npm registry. This is intended to provide the agent with the most current best practices and API signatures, ensuring the accuracy of generated or reviewed code.
- Command Execution for Package Management: The instructions include shell commands to download and extract official Cloudflare packages, specifically for managing TypeScript definitions. This helps maintain type safety by ensuring the agent has access to the latest definitions from a reputable provider.
- Security-Focused Guidance: The skill actively discourages insecure patterns, such as hardcoding secrets or using non-cryptographic random functions. It provides specific instructions for secure alternatives, such as using the Web Crypto API and constant-time comparisons for secrets.
- Indirect Content Ingestion Surface: The skill processes content fetched from external documentation URLs. This is used to bias the agent towards official rules rather than pre-trained knowledge. While this represents a surface for external data ingestion, the risk is minimized by targeting specific, well-known official domains.
Audit Metadata