zero-trust
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes
curlcommand templates for managing Cloudflare Access applications and policies. These templates correctly utilize environment variables (e.g.,${CF_TOKEN},${ACCOUNT_ID}) to prevent credential exposure. - [EXTERNAL_DOWNLOADS]: References the official container image for
oauth2-proxyfrom Quay.io, a well-known and reputable container registry. This is a standard component for implementing identity-aware proxies. - [SAFE]: The Rego policies and Kubernetes NetworkPolicy templates adhere to least-privilege principles, such as implementing a 'default-deny-all' posture and explicitly allowing necessary traffic.
Audit Metadata