cloudflare
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a robust backend implementation for a subdomain registry and deployment manager. It includes secure logic for managing user quotas, collaborator invites, and subdomain availability.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute a local deployment script viabun. This behavior is the primary intended function of the skill and is used to automate the deployment of application assets to the Cloudflare platform. - [SAFE]: Authentication is handled via OIDC-compliant RS256 JWTs. The verification logic is implemented using the standard Web Crypto API (SubtleCrypto) and includes appropriate validation for expiration, timing, and authorized party (azp) claims.
- [SAFE]: The Cloudflare Worker includes a proxy endpoint for AI completions that forwards requests to OpenRouter. This implementation correctly utilizes environment variables for sensitive API keys and enforces authentication to prevent unauthorized usage of the proxy.
Audit Metadata