cliproxyapi-cloudflare-stack
Fail
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Clones a repository from an unverified GitHub user account (
xsser/cliproxyapi-cloudflare-stack). - [REMOTE_CODE_EXECUTION]: Instructs the user to execute shell scripts (
deploy_vm.sh,sync_credentials.sh) provided by the unverified third-party repository. - [COMMAND_EXECUTION]: Pulls and runs a Docker image (
cliproxyapi/cliproxyapi:latest) from a repository that is not associated with the skill author or a trusted vendor. - [EXTERNAL_DOWNLOADS]: Downloads the
cloudflaredbinary from Cloudflare's official GitHub releases repository. - [PROMPT_INJECTION]: The gateway architecture creates a surface for indirect prompt injection by processing and proxying data from external API requests.
- Ingestion points: Publicly exposed OpenAI-compatible endpoint at
/v1/chat/completionsvia Cloudflare Tunnel. - Boundary markers: None specified in the provided stack configuration.
- Capability inventory: The skill allows network requests to external providers (Grok, OpenAI) and local database writes to Cloudflare D1.
- Sanitization: No input validation or request sanitization steps are defined for the proxied data.
Recommendations
- AI detected serious security threats
Audit Metadata