infra-platform-cloudflare-workers

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill enforces defensive programming by mandating the use of parameterized SQL queries via D1's prepare().bind() syntax, which is a standard and effective mitigation against SQL injection attacks.- [SAFE]: It provides robust guidance on secrets management, explicitly warning against storing credentials in source code or configuration files and recommending the use of the wrangler secret command and gitignored environment files.- [SAFE]: The instructions address a specific security risk inherent to the Workers runtime by warning against module-level mutable state, preventing potential data leaks between requests served by the same V8 isolate.- [SAFE]: Implementation patterns for large payload handling emphasize streaming (e.g., for R2 objects), which protects the application from memory exhaustion and denial-of-service conditions within the platform's 128 MB limit.- [SAFE]: The skill relies on official Cloudflare tooling (Wrangler) and reputable, well-known libraries such as Hono and Vitest, with all external references originating from trusted or vendor-aligned sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 01:33 AM