code-review

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
4
Flagged
4
Chunks
6
Flagged Files (4)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: code-review description: Reviews Workers and Cloudflare Developer Platform code for type correctness, API usage, and configuration validity. Load when reviewing TypeScript/JavaScript using Workers APIs, wrangler.jsonc/toml config, or Cloudflare bindings (KV, R2, D1, Durable Objects, Queues, Vectorize, AI, Hyperdrive).

Tool: SKILL.md [2/2] Description: - TOML config in existing docs (only flag for new content) ## Output Format ``` **[SEVERITY]** Brief description `file.ts:42` — explanation with evidence (tool output, type error, config mismatch) Suggested fix: `code` (if applicable) ``` Severity: **CRITICAL** (security, data loss, crash) | **HIGH** (type error, wrong API, broken config) | **MEDIUM** (missing validation, edge case, outdated pattern) | **LOW** (style, minor improvement) End with a summary count

references/common-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/common-patterns.md [1/2] Description: # Common Patterns — What to Verify Do not memorize patterns. Retrieve current examples from Cloudflare docs and verify code against the current type definitions. This file describes _what to check_, not _what the code should look like_.

Tool: references/common-patterns.md [2/2] Description: Flag examples that implement full auth flows when the page topic is something else.

references/workers-types.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/workers-types.md Description: # Workers Types ## How to Retrieve Current Types Prefer generated types over baked-in knowledge. Types change with compatibility dates and new bindings.

references/wrangler-config.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/wrangler-config.md Description: # Wrangler Config Validation ## Schema Retrieval The authoritative schema is bundled with the `wrangler` npm package as `config-schema.json`. It is a JSON Schema (draft-07) document defining the full `RawConfig` type.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
4
Files Flagged
4
Chunks Analyzed
6
Analyzed
Feb 21, 2026, 08:23 PM
Security Audit — runlayer — code-review