cloudflare-d1
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a vulnerability surface by demonstrating how to build Worker endpoints that process untrusted data. * Ingestion points: API request parameters and JSON bodies are handled within templates/d1-worker-queries.ts. * Boundary markers: The instructions explicitly separate SQL logic from input data through the use of '?' placeholders. * Capability inventory: The skill enables SQL execution on D1 databases via the env.DB binding across all Worker templates. * Sanitization (present): All code templates and the best-practices.md guide mandate the use of the .prepare() and .bind() methods to ensure data is correctly escaped.
- [EXTERNAL_DOWNLOADS]: The configuration script templates/d1-setup-migration.sh references npx wrangler, while SKILL.md identifies dependencies like hono and @cloudflare/workers-types. These are well-known, established tools and libraries in the Cloudflare ecosystem and are recognized as safe sources.
Audit Metadata