tinyship-cloudflare
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx wranglercommands for Cloudflare authentication, resource creation, and deployment. These are standard operations for the Cloudflare ecosystem. - [CREDENTIALS_UNSAFE]: The documentation includes placeholders for API keys and secrets (e.g.,
<your-auth-secret>,<api-token-with-email-permission>). It correctly instructs users to manage sensitive data using.dev.varsorwrangler secret putrather than hardcoding them in configuration files. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns or untrusted script downloads were detected. The skill relies on locally installed dependencies and official CLI tools.
Audit Metadata