cloudflare-zero-trust

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill uses sudo for administrative tasks necessary for system-level configuration.
  • Evidence: sudo tee /usr/share/keyrings/cloudflare-main.gpg, sudo apt install -y cloudflared, sudo cloudflared service install, and sudo systemctl start cloudflared.
  • [EXTERNAL_DOWNLOADS]: Fetches resources from well-known infrastructure domains.
  • Evidence: curl -fsSL https://pkg.cloudflare.com/cloudflare-main.gpg and interaction with https://api.cloudflare.com/client/v4/.
  • [COMMAND_EXECUTION]: Provides shell commands for authenticating and configuring infrastructure services.
  • Evidence: cloudflared tunnel login, cloudflared tunnel create, and cloudflared tunnel route dns.
  • [DATA_EXFILTRATION]: Interacts with sensitive local file paths to manage service-specific credentials and configurations.
  • Evidence: Accesses ~/.cloudflared/<TUNNEL_ID>.json and ~/.ssh/config to store and configure service credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 09:58 PM