cloudflare-kv

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were identified during the analysis.
  • [COMMAND_EXECUTION]: The skill provides several bash scripts within the scripts/ directory to automate developer tasks.
  • analyze-kv-usage.sh: Uses standard text processing tools like grep to perform static analysis on Worker source files, identifying missing optimizations like TTL or caching.
  • setup-kv-namespace.sh: An interactive wizard that uses the wrangler CLI to create production and preview namespaces.
  • test-kv-connection.sh: Validates namespace connectivity by executing basic CRUD (Create, Read, Delete) operations through the wrangler CLI.
  • validate-kv-config.sh: Inspects configuration files (wrangler.jsonc) for structural and formatting issues using grep and jq.
  • [EXTERNAL_DOWNLOADS]: The skill performs diagnostic network checks against a well-known service.
  • scripts/check-versions.sh: Executes a curl request to https://api.cloudflare.com/client/v4/accounts to verify the availability of the Cloudflare API.
  • This operation targets an official domain of a well-known technology provider and is used exclusively for environment verification.
  • [CREDENTIALS_UNSAFE]: The skill follows and promotes secure development practices regarding sensitive information.
  • Multiple files, including references/best-practices.md and templates/wrangler-kv-config.jsonc, contain explicit instructions to use environment variables instead of hardcoding namespace IDs or API tokens.
  • No hardcoded secrets or sensitive credentials were found in the skill's codebase.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 02:28 PM