cloudflare-nextjs

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of necessary dependencies, such as @opennextjs/cloudflare and wrangler, through standard package managers like npm and npx. These tools are industry-standard and are sourced from their official registries, aligning with the skill's documented purpose.
  • [COMMAND_EXECUTION]: The skill provides scripts and instructions to execute essential development commands, including next dev, opennextjs-cloudflare build, and wrangler deploy. These commands are required for building and deploying the application to the Cloudflare platform and are used according to standard practices.
  • [INDIRECT_PROMPT_INJECTION]: As a deployment tool, the skill naturally processes application code and configurations which are externally supplied by the user. This creates a surface for indirect prompt injection where malicious code in the application could attempt to influence the deployment. The skill mitigates this by providing guidance on secure architecture, such as using getCloudflareContext() for binding access and setting appropriate compatibility_date flags.
  • Ingestion points: Processes project-specific configuration files (next.config.ts, wrangler.jsonc) and the application source code directory.
  • Capability inventory: Executes build and deployment shell commands; accesses Cloudflare platform services (D1, R2, KV, AI).
  • Boundary markers: Relies on the standard project structure and explicit user commands to trigger actions.
  • Sanitization: The skill relies on the standard security boundaries provided by the Next.js framework and the Cloudflare Workers runtime environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:00 AM
Security Audit — agent-trust-hub — cloudflare-nextjs