moai-baas-cloudflare-ext

Warn

Audited by Socket on Mar 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is a documentation and example implementation for Cloudflare edge patterns (Workers, Durable Objects, WAF, rate limiting, image transforms). I found no indicators of intentional malicious behavior, download-execute chains, credential exfiltration to attacker domains, or obfuscated code. The primary security considerations are operational: protecting the CLOUDFLARE_API_TOKEN and other env bindings (least privilege, rotation), sanitizing or moderating persisted user content in Durable Objects, and validating trusted sources for Context7 documentation. Overall the code is coherent with its stated purpose; risk is moderate mainly due to handling of sensitive env tokens and persisted user data rather than malicious intent.

Confidence: 80%Severity: 75%
Audit Metadata
Analyzed At
Mar 1, 2026, 01:08 AM
Package URL
pkg:socket/skills-sh/ajbcoding%2Fclaude-skill-eval%2Fmoai-baas-cloudflare-ext%2F@6c3a65b67057f1d9f766634a7ce9d0e72cfff680