publish-artifacts
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
wranglerCLI andcurlto manage Cloudflare resources, including R2 buckets, Workers, and Zero Trust Access policies. These actions are authenticated via OAuth or user-provided tokens. - [REMOTE_CODE_EXECUTION]: The skill deploys a Cloudflare Worker to serve artifacts. The provided Worker source code includes security-conscious path normalization to prevent directory traversal and access control bypasses.
- [INDIRECT_PROMPT_INJECTION]: The skill processes a local
artifacts.manifest.jsonfile and folder tree to determine deployment structure and access rules. This ingestion surface is managed through manifest validation and user confirmation of sensitive operations. - [DYNAMIC_EXECUTION]: The skill dynamically generates the
wrangler.tomlconfiguration file from a template at runtime, substituting user-defined values for the Worker name, site domain, and R2 bucket.
Audit Metadata