workers-best-practices

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Accesses well-known and trusted resources for configuration and dependencies. The skill fetches type information from the npm registry and references official Cloudflare developer documentation for canonical implementation patterns.- [COMMAND_EXECUTION]: Employs standard developer tools to automate environment verification and code quality checks. This includes using npm pack to retrieve type definitions and npx to run wrangler for type generation and eslint for static analysis.- [INDIRECT_PROMPT_INJECTION]: As a code-review tool, the skill processes external source code. It includes defensive instructions to validate code structures and strictly scope reviews to Workers best practices, minimizing the risk associated with processing untrusted input. Evidence: Ingests local files via read_file and search_code; Capabilities include wrangler_deploy and execute_command; No explicit boundary markers or sanitization are defined for external content, though the skill provides security guardrails for its own operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 11:20 AM