cloudflare-tunnel

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute curl for network requests and printenv to retrieve authentication tokens from the environment.
  • [EXTERNAL_DOWNLOADS]: The agent is directed to fetch data and download files from remote endpoints through curl commands.
  • [DATA_EXFILTRATION]: Service tokens and authorization headers are transmitted to remote hosts. This is the documented purpose of the skill for facilitating Cloudflare Access authentication.
  • [SAFE]: Sensitive information is handled via environment variables and dedicated platform secret fields (vm0_secrets) rather than being hardcoded. All references and external links target official documentation from well-known service providers.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 12:21 PM