cloudflare-workers
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@membranehq/clipackage via npm. This is a legitimate utility provided by the skill's author (membranedev) to facilitate the integration. - [SAFE]: The skill adheres to security best practices by explicitly instructing the agent not to request API keys or sensitive tokens from the user, instead using Membrane's managed connection system.
- [COMMAND_EXECUTION]: Standard use of CLI commands (
membrane connect,membrane action,membrane request) is documented to interact with Cloudflare services. These commands are necessary for the skill's primary functionality and are executed through the vendor's authenticated CLI. - [PROMPT_INJECTION]: While the skill processes external data from Cloudflare Workers (such as KV stores or R2 buckets), this is the primary intent of the skill. No malicious instruction overrides or bypass attempts were detected in the skill's documentation.
Audit Metadata