edgeone-makers-edge-functions
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation for the EdgeOne Makers developer platform. All patterns observed are consistent with the documented purpose of building and deploying edge functions.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates processing untrusted HTTP request data, which establishes a potential indirect prompt injection surface.
- Ingestion points: The skill shows how to ingest external data via
context.request.json()in theedge-functions/api/users.jsexample. - Boundary markers: There are no explicit instructions or markers provided in these simplified educational snippets to delimit user-provided content.
- Capability inventory: The runtime environment provides capabilities for outbound network requests via the
Fetch APIand persistent storage operations via themy_kvglobal variable. - Sanitization: The provided code examples prioritize functionality and do not include explicit input validation or sanitization logic, which is typical for introductory technical documentation.
Audit Metadata