ai-persistence/build-cloudflare-artifact-store
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: No suspicious or dangerous command execution patterns or shell scripts were detected. The provided code consists of standard TypeScript logic for handling data streams and database interactions.
- [CREDENTIALS_UNSAFE]: The skill does not contain hardcoded API keys, tokens, or other sensitive secrets. It correctly utilizes Cloudflare Worker environment bindings for service access.
- [REMOTE_CODE_EXECUTION]: There is no logic for downloading and executing arbitrary scripts from remote sources. All operations are local to the application logic.
- [INDIRECT_PROMPT_INJECTION]: The database interaction layer uses prepared statements with parameter binding (e.g.,
db.prepare(...).bind(...)), which effectively mitigates SQL injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: Referenced external dependencies are limited to official libraries from the TanStack ecosystem and well-known SDKs for major cloud providers such as AWS, Google Cloud, and Vercel.
Audit Metadata