cloudflare-nextjs
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to download and install official packages such as @opennextjs/cloudflare, next, and wrangler from established registries. It also leverages Cloudflare's official scaffolding tool via npm create cloudflare. These downloads target well-known and trusted services intended for this specific deployment workflow.
- [COMMAND_EXECUTION]: Several helper scripts (scripts/analyze-bundle.sh, scripts/setup-existing-project.sh, scripts/setup-new-project.sh) are provided to automate environment setup and project analysis. These scripts execute standard shell commands and utilize project CLIs to perform legitimate development tasks.
- [SAFE]: Analysis of the skill instructions, scripts, and documentation revealed no evidence of prompt injection, data exfiltration, obfuscation, or other malicious behaviors. The skill demonstrates security awareness by including guidance on patching known vulnerabilities like CVE-2025-6087.
Audit Metadata