The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The Worker relay template (assets/email-sender-worker/src/index.ts) creates a capability to send arbitrary email content (HTML/Text) via the env.EMAIL.send binding. This creates a surface for indirect prompt injection if the agent or backend using this tool processes untrusted external data and passes it into the email body.
Ingestion points: assets/email-sender-worker/src/index.ts accepts data via request.json().
Boundary markers: None provided in the template; assumes the caller manages content safety.
Capability inventory: Accesses the send_email Workers binding to dispatch network-bound communications.
Sanitization: The template performs structural validation but does not sanitize the string content of the email body before transmission.
[COMMAND_EXECUTION]: The skill instructions (SKILL.md) direct the agent or user to execute various CLI commands including wrangler, dig, curl, and openssl for deployment, DNS verification, and testing. These are standard development operations but represent the primary mechanism for interacting with the Cloudflare account and deploying code.

build-cloudflare-email-sending