cloudflare-security-audit
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a professional and comprehensive methodology for security auditing. It includes strict authorization requirements, mandatory confirmation gates, and safety warnings for testing in isolated environments.
- [EXTERNAL_DOWNLOADS]: The skill refers to the Cloudflare Security Audit repository. As Cloudflare is a well-known and trusted technology organization, these references are considered safe and represent standard attribution.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted codebases as audit targets. It mitigates the risk of indirect prompt injection by instructing the agent to treat repository content solely as evidence rather than instructions, and by providing explicit boundaries for data ingestion.
- [DYNAMIC_EXECUTION]: The methodology includes steps for dynamic verification of vulnerabilities, such as building and running target code in a minimal harness. These actions are appropriately scoped to authorized security assessments and include necessary safeguards like manual script review and the use of disposable, restricted environments.
Audit Metadata