cloudflare-zero-trust
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill uses
sudofor administrative tasks necessary for system-level configuration. - Evidence:
sudo tee /usr/share/keyrings/cloudflare-main.gpg,sudo apt install -y cloudflared,sudo cloudflared service install, andsudo systemctl start cloudflared. - [EXTERNAL_DOWNLOADS]: Fetches resources from well-known infrastructure domains.
- Evidence:
curl -fsSL https://pkg.cloudflare.com/cloudflare-main.gpgand interaction withhttps://api.cloudflare.com/client/v4/. - [COMMAND_EXECUTION]: Provides shell commands for authenticating and configuring infrastructure services.
- Evidence:
cloudflared tunnel login,cloudflared tunnel create, andcloudflared tunnel route dns. - [DATA_EXFILTRATION]: Interacts with sensitive local file paths to manage service-specific credentials and configurations.
- Evidence: Accesses
~/.cloudflared/<TUNNEL_ID>.jsonand~/.ssh/configto store and configure service credentials.
Audit Metadata