workers-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Accesses well-known and trusted resources for configuration and dependencies. The skill fetches type information from the npm registry and references official Cloudflare developer documentation for canonical implementation patterns.- [COMMAND_EXECUTION]: Employs standard developer tools to automate environment verification and code quality checks. This includes using
npm packto retrieve type definitions andnpxto runwranglerfor type generation andeslintfor static analysis.- [INDIRECT_PROMPT_INJECTION]: As a code-review tool, the skill processes external source code. It includes defensive instructions to validate code structures and strictly scope reviews to Workers best practices, minimizing the risk associated with processing untrusted input. Evidence: Ingests local files viaread_fileandsearch_code; Capabilities includewrangler_deployandexecute_command; No explicit boundary markers or sanitization are defined for external content, though the skill provides security guardrails for its own operations.
Audit Metadata