cdn
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard command-line tools including
aws,terraform, anddockerto manage infrastructure and validate configuration files. These actions are within the expected scope of a deployment and configuration tool. - [EXTERNAL_DOWNLOADS]: Interacts with the Cloudflare API (
api.cloudflare.com) viacurlto perform cache invalidation. This is a well-known service and the operation is central to the skill's stated purpose of managing CDN caches. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project configuration files (e.g.,
vercel.json,wrangler.toml,nginx.conf) to determine deployment settings. While processing external files creates an attack surface for indirect prompt injection, the skill implements a self-healing phase to validate the syntax of generated configurations. - Ingestion points: Scans project files such as
wrangler.tomlandvercel.jsonin Phase 1. - Boundary markers: None identified.
- Capability inventory: The skill can write configuration files and execute deployment commands (
aws,terraform,curl). - Sanitization: Performs syntactic validation and syntax checking (Phase: SELF-HEALING) but does not explicitly describe semantic sanitization of ingested content.
Audit Metadata