workers-best-practices

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill retrieves documentation and configuration guidelines from developers.cloudflare.com to ensure information is up-to-date.
  • [EXTERNAL_DOWNLOADS]: The skill downloads the @cloudflare/workers-types package from the NPM registry to inspect authoritative type definitions for the Workers runtime.
  • [COMMAND_EXECUTION]: The skill uses local shell commands such as rg (ripgrep), npm pack, and tar to inspect the project's installed dependencies and verify the environment configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest content from external Cloudflare documentation to inform its code review and authoring tasks.
  • Ingestion points: Cloudflare documentation URLs specified in SKILL.md and references/review.md.
  • Boundary markers: None present.
  • Capability inventory: Local command execution (npm, rg, npx) and file system access as described in the review workflow.
  • Sanitization: None present.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 04:37 AM