tinyship-cloudflare

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx wrangler commands for Cloudflare authentication, resource creation, and deployment. These are standard operations for the Cloudflare ecosystem.
  • [CREDENTIALS_UNSAFE]: The documentation includes placeholders for API keys and secrets (e.g., <your-auth-secret>, <api-token-with-email-permission>). It correctly instructs users to manage sensitive data using .dev.vars or wrangler secret put rather than hardcoding them in configuration files.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns or untrusted script downloads were detected. The skill relies on locally installed dependencies and official CLI tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 11:14 AM
Security Audit — agent-trust-hub — tinyship-cloudflare