cloudflare-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- Secure Development Guidance: The skill explicitly instructs users on how to avoid common vulnerabilities like SQL injection (by using prepared statements in D1) and path traversal (in R2 storage patterns). This helps ensure that applications built using this skill are secure by design.
- Secret Management Patterns: The instructions promote using Cloudflare Secrets and the centralized Secrets Store instead of hardcoding sensitive credentials. This context-appropriate guidance reduces the risk of accidental credential exposure.
- Trusted Dependencies: All referenced software packages and SDKs are standard, industry-recognized tools for cloud infrastructure and AI development, originating from trusted providers.
- Input Validation Guidance: For features that process untrusted data (like Email Workers or Data Pipelines), the skill includes implementation patterns for validation and sanitization using libraries like Zod, which is a critical security practice for preventing injection attacks.
Audit Metadata