cloudflare-workers-observability
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data such as HTTP request metadata (headers, URLs, methods) and application logs for monitoring purposes.
- Ingestion points:
TailEventdata structures intemplates/tail-worker.tsandreferences/tail-workers.mdingest live request data. - Boundary markers: The
Loggerimplementation intemplates/logging-setup.tsandreferences/logging.mdincludes aredactmethod that uses regex patterns to strip sensitive keys like 'password', 'secret', and 'token' from logs. - Capability inventory: The skill uses
fetchfor network operations to send logs/alerts to external services (Slack, PagerDuty, Datadog) and executes thewranglerCLI via bash scripts. - Sanitization: CLI scripts include explicit validation of user-supplied arguments against strict charsets to mitigate injection risks.
- [COMMAND_EXECUTION]: The skill provides developer utility scripts for log analysis and configuration management.
- Evidence:
scripts/analyze-logs.shandscripts/setup-logging.shexecute system tools likewrangler,jq,grep,sed, andmktemp. - Safety Measures: The scripts use array-based command invocation and safe temporary file handling with backups to prevent command injection and accidental data loss.
Audit Metadata