cloudflare-tunnel
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
curlfor network requests andprintenvto retrieve authentication tokens from the environment. - [EXTERNAL_DOWNLOADS]: The agent is directed to fetch data and download files from remote endpoints through
curlcommands. - [DATA_EXFILTRATION]: Service tokens and authorization headers are transmitted to remote hosts. This is the documented purpose of the skill for facilitating Cloudflare Access authentication.
- [SAFE]: Sensitive information is handled via environment variables and dedicated platform secret fields (
vm0_secrets) rather than being hardcoded. All references and external links target official documentation from well-known service providers.
Audit Metadata