workers-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves documentation and configuration guidelines from
developers.cloudflare.comto ensure information is up-to-date. - [EXTERNAL_DOWNLOADS]: The skill downloads the
@cloudflare/workers-typespackage from the NPM registry to inspect authoritative type definitions for the Workers runtime. - [COMMAND_EXECUTION]: The skill uses local shell commands such as
rg(ripgrep),npm pack, andtarto inspect the project's installed dependencies and verify the environment configuration. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest content from external Cloudflare documentation to inform its code review and authoring tasks.
- Ingestion points: Cloudflare documentation URLs specified in
SKILL.mdandreferences/review.md. - Boundary markers: None present.
- Capability inventory: Local command execution (
npm,rg,npx) and file system access as described in the review workflow. - Sanitization: None present.
Audit Metadata