publish-artifacts

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses wrangler CLI and curl to manage Cloudflare resources, including R2 buckets, Workers, and Zero Trust Access policies. These actions are authenticated via OAuth or user-provided tokens.
  • [REMOTE_CODE_EXECUTION]: The skill deploys a Cloudflare Worker to serve artifacts. The provided Worker source code includes security-conscious path normalization to prevent directory traversal and access control bypasses.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes a local artifacts.manifest.json file and folder tree to determine deployment structure and access rules. This ingestion surface is managed through manifest validation and user confirmation of sensitive operations.
  • [DYNAMIC_EXECUTION]: The skill dynamically generates the wrangler.toml configuration file from a template at runtime, substituting user-defined values for the Worker name, site domain, and R2 bucket.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:57 AM