cloudflare-kv
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified during the analysis.
- [COMMAND_EXECUTION]: The skill provides several bash scripts within the
scripts/directory to automate developer tasks. analyze-kv-usage.sh: Uses standard text processing tools likegrepto perform static analysis on Worker source files, identifying missing optimizations like TTL or caching.setup-kv-namespace.sh: An interactive wizard that uses thewranglerCLI to create production and preview namespaces.test-kv-connection.sh: Validates namespace connectivity by executing basic CRUD (Create, Read, Delete) operations through thewranglerCLI.validate-kv-config.sh: Inspects configuration files (wrangler.jsonc) for structural and formatting issues usinggrepandjq.- [EXTERNAL_DOWNLOADS]: The skill performs diagnostic network checks against a well-known service.
scripts/check-versions.sh: Executes acurlrequest tohttps://api.cloudflare.com/client/v4/accountsto verify the availability of the Cloudflare API.- This operation targets an official domain of a well-known technology provider and is used exclusively for environment verification.
- [CREDENTIALS_UNSAFE]: The skill follows and promotes secure development practices regarding sensitive information.
- Multiple files, including
references/best-practices.mdandtemplates/wrangler-kv-config.jsonc, contain explicit instructions to use environment variables instead of hardcoding namespace IDs or API tokens. - No hardcoded secrets or sensitive credentials were found in the skill's codebase.
Audit Metadata