cloudflare-email-service
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates integration with Cloudflare Email Service using official tools and repositories. All external references target trusted organizations or well-known services, including Cloudflare's developer documentation, GitHub repositories, and official NPM registries.
- [SAFE]: Guidance for secret management is correctly provided, instructing users to utilize environment variables or Cloudflare Secrets rather than hardcoding sensitive API tokens in source code.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies the processing of inbound emails as a potential attack surface. It mitigates this risk by providing explicit security recommendations, such as using escaping templates for HTML rendering, validating authentication results (SPF/DKIM/DMARC), and ensuring human-in-the-loop review for automated replies. Given that handling emails is the primary purpose of this skill and it includes appropriate safeguards, this surface is considered well-managed.
- [SAFE]: Code examples for attachments use standard formats (raw strings for text and ArrayBuffers/Base64 for binary data) and do not contain hidden or obfuscated executable code.
Audit Metadata