NYC

cloudflare-worker-base

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): No malicious behaviors or security vulnerabilities were detected. The skill provides standard project templates using trusted Cloudflare and Hono dependencies.- [Indirect Prompt Injection] (LOW): The boilerplate code includes a data ingestion surface that could be used to process untrusted data.
  • Ingestion points: templates/src/index.ts
  • The /api/echo endpoint reads untrusted JSON from the request body.
  • Boundary markers: Absent in the template code.
  • Capability inventory: The script is limited to returning JSON responses and has no file system or network egress capabilities beyond Hono's default behavior.
  • Sanitization: Absent in the template code, as it is a simple echo example.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:47 PM