cloudflare-workers-publish
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEDATA_EXFILTRATIONCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The deployment script
scripts/publish_static.shreads a 1Password service account token from the local path~/.claude/.secrets/op-service-account-token. This token is used to authenticate the 1Password CLI to retrieve Cloudflare credentials. - [CREDENTIALS_UNSAFE]: The skill fetches the
CLOUDFLARE_API_TOKENandCLOUDFLARE_ACCOUNT_IDfrom 1Password and exports them as environment variables. This is the primary and intended function of the skill to facilitate automated deployment to Cloudflare. - [COMMAND_EXECUTION]: The script executes
npx wrangler deployto upload static assets to Cloudflare Workers. Cloudflare and the Wrangler CLI are well-known and trusted services for web development.
Audit Metadata