cloudflare-images
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate templates for interacting with Cloudflare's official Image API. All external references point to documented Cloudflare services or reputable developer resources. Standard security practices are encouraged, such as secret management for API tokens and server-side signature generation for private content.
- [INDIRECT_PROMPT_INJECTION]: The skill provides functionality for ingesting images from user-supplied URLs and processing multipart/form-data uploads. Analysis of the capability surface shows that the skill handles binary image data and directs network requests to Cloudflare's ingestion endpoints. The templates include basic sanitization patterns like URL encoding to ensure safe parameter handling within the Workers environment.
Audit Metadata