cloudflare-workers-multi-lang
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate development resources and templates for Cloudflare Workers. All code provided is transparent and follows standard industry practices for web worker development.
- [COMMAND_EXECUTION]: Build scripts located in the
scripts/directory (e.g.,build-rust.shandbuild-wasm.sh) utilize shell commands to execute build tools likecargo,npm,wasm-pack, andrustup. These commands are standard for the stated purpose of compiling and optimizing multi-language workers. - [EXTERNAL_DOWNLOADS]: The build scripts and instructions facilitate the installation of necessary development dependencies (such as
wasm-packandassemblyscript) from official package registries (NPM and Crates.io). These are well-known and trusted sources within the developer ecosystem. - [INDIRECT_PROMPT_INJECTION]: The worker templates (
templates/python-worker.py,templates/rust-worker.rs) define handlers for external HTTP requests, which represent an ingestion point for untrusted data. The skill mitigates potential injection risks by demonstrating best practices, specifically the use of parameterized queries (db.prepare().bind()) for D1 database interactions.
Audit Metadata