moai-baas-cloudflare-ext
Audited by Socket on Mar 1, 2026
1 alert found:
SecurityThis skill is a documentation and example implementation for Cloudflare edge patterns (Workers, Durable Objects, WAF, rate limiting, image transforms). I found no indicators of intentional malicious behavior, download-execute chains, credential exfiltration to attacker domains, or obfuscated code. The primary security considerations are operational: protecting the CLOUDFLARE_API_TOKEN and other env bindings (least privilege, rotation), sanitizing or moderating persisted user content in Durable Objects, and validating trusted sources for Context7 documentation. Overall the code is coherent with its stated purpose; risk is moderate mainly due to handling of sensitive env tokens and persisted user data rather than malicious intent.