cloudflare
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of official Cloudflare development tools (
wrangler) and reputable libraries (hono,zod) from standard package registries. - [INDIRECT_PROMPT_INJECTION]: The code snippets include patterns for handling user-provided data via API requests and file uploads.
- Ingestion points: Request body parsing and multipart form data handling in
SKILL.md. - Boundary markers: Implements
zValidatorfor API payload validation. - Capability inventory: Accesses edge databases (D1), object storage (R2), and key-value stores (KV).
- Sanitization: Uses parameterized queries (
.bind()) to handle user input in database operations safely.
Audit Metadata