cloudflare-vectorize
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a Retrieval-Augmented Generation (RAG) architecture that processes external data to provide context for AI responses.
- Ingestion points: Documents and external URLs are ingested through the
/ingestand/ingest/urlendpoints intemplates/document-ingestion.tsandtemplates/rag-chat.ts. - Boundary markers:
templates/rag-chat.tsemploys structural separators and title headers to delimit retrieved context within the LLM prompt. - Capability inventory: The skill utilizes
fetchfor network operations, Cloudflare Workers AI for model execution, and Vectorize for database operations. - Sanitization: A robust text extraction utility in
templates/document-ingestion.tsusesHTMLRewriterto safely strip scripts and other dangerous elements from ingested HTML content. - [EXTERNAL_DOWNLOADS]: The skill integrates with trusted services for AI capabilities.
- Utilizes the official OpenAI API and Cloudflare's Workers AI platform for generating embeddings.
- Provides functionality to fetch content from remote URLs for the intended purpose of document ingestion and indexing.
- [COMMAND_EXECUTION]: The documentation includes standard management commands for the Cloudflare platform.
- Instructs the user on utilizing
wranglerCLI for index creation, metadata indexing, and vector management, which are standard development procedures.
Audit Metadata