Versioned security assessment
Report ID: SA-7DB9B9F0
7/9/2026, 1:30:16 AM
cloudflare security assessment v5
Skill Security Certification Report
Audit model: claude Latest published report
- Skill name
- cloudflare
- Version
- v5
- Maintainer
- cloudflare
- Coverage
- 321 Files scanned · 49,016 Lines analyzed
- Policy version
- Unavailable
Highest confirmed finding severity
Critical
2 confirmed security findings require attention.
Installation context
Check the current Skill page
This page summarizes report evidence only. The Skill page provides the canonical install advisory.
Open current Skill pageThis report does not block or authorize the manifest or ZIP.
The skill is primarily a large Cloudflare reference bundle with many static matches caused by documentation examples, placeholders, and product configuration snippets. A small number of command-execution examples remain security-sensitive because users or agents could copy them into real environments, but no hidden malware, prompt injection, credential exfiltration intent, or auto-executing installer behavior was found. Static review was capped at 400/2983 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
Report position
Latest published report
Latest refers to the report sequence, not to artifact currentness.
Audit attestation
Not attestable
The required immutable binding is incomplete.
Human verification
Not verified
No human verification is recorded for this report.
Coverage
321 Files scanned · 49,016 Lines analyzed
33 items shown for review
Limitations
This report does not claim runtime or sandbox execution and does not prove the absence of side effects.
Evidence chain
Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.
Source
Commit and path bound
Artifact
Content and tree hashes bound
Audit
Complete
Capabilities observed
Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.
Contains scripts
May execute code included with the Skill.
Observed in 50 evidence locations
Network access
May connect to external services.
Observed in 48 evidence locations
Filesystem access
May read or write local files.
Observed in 50 evidence locations
Env variables
May read values from the process environment.
Observed in 29 evidence locations
External commands
May invoke commands or programs outside the Skill.
Observed in 66 evidence locations
Capability review items (31)
High
Dynamic code evaluation with eval()
| **OpenFeature SDK** | Workers, Node.js, browser | `@cloudflare/flagship` + `@openfeature/server-sd
The reference mentions dynamic eval usage, which is dangerous if copied into application code. Context may be educational, so confidence is moderate rather than high.
High
Process exec
const cursor = this.sql.exec('SELECT * FROM users WHERE email = ?', email);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec('UPDATE accounts SET balance = balance - ? WHERE id = ?', 100, 1);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec('UPDATE accounts SET balance = balance + ? WHERE id = ?', 100, 2);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec(`
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec("CREATE TABLE events(id INTEGER PRIMARY KEY)");
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec("INSERT INTO events VALUES (?)", 1234567890123456789n); // Corrupts!
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec("CREATE TABLE events(id TEXT PRIMARY KEY)");
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec("INSERT INTO events VALUES (?)", "1234567890123456789");
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec(`
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec(`CREATE TABLE users(id INTEGER PRIMARY KEY, name TEXT)`);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (1)");
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec(`ALTER TABLE users ADD COLUMN email TEXT`);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (2)");
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Process exec
this.sql.exec('DELETE FROM requests WHERE key = ? AND timestamp < ?', key, now - window);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
const cursor = this.sql.exec('SELECT * FROM users WHERE email = ?', email);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec('UPDATE accounts SET balance = balance - ? WHERE id = ?', 100, 1);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec('UPDATE accounts SET balance = balance + ? WHERE id = ?', 100, 2);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec(`
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec("CREATE TABLE events(id INTEGER PRIMARY KEY)");
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec("INSERT INTO events VALUES (?)", 1234567890123456789n); // Corrupts!
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec("CREATE TABLE events(id TEXT PRIMARY KEY)");
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec("INSERT INTO events VALUES (?)", "1234567890123456789");
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec(`
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec(`CREATE TABLE users(id INTEGER PRIMARY KEY, name TEXT)`);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (1)");
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec(`ALTER TABLE users ADD COLUMN email TEXT`);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec("INSERT INTO _sql_schema_migrations (id) VALUES (2)");
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
Python exec() function
this.sql.exec('DELETE FROM requests WHERE key = ? AND timestamp < ?', key, now - window);
The reference includes process or dynamic execution patterns. They appear to be examples, but such patterns are security-sensitive and should stay flagged for manual review.
High
sudo privilege escalation
sudo cloudflared service install
The reference includes privileged service-management commands. They are documentation examples, but they can alter host persistence or privileges if followed without review.
High
sudo privilege escalation
sudo launchctl start com.cloudflare.cloudflared
The reference includes privileged service-management commands. They are documentation examples, but they can alter host persistence or privileges if followed without review.
Risk findings
Confirmed security concerns are separated from items that still need review.
Confirmed security concerns (2)
RISK-001 Critical
Pipe to shell pattern
await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh');
The reference contains a pipe-to-shell install command that an agent or user could copy into a live environment. Even though it is documentation, this pattern is hazardous and should be replaced with safer installation steps.
RISK-002 High
Systemd service enablement
systemctl start cloudflared && systemctl enable cloudflared
The reference includes privileged service-management commands. They are documentation examples, but they can alter host persistence or privileges if followed without review.
Remediation
Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.
- FIX-001CriticalPipe-to-shell installation example in sandbox guidance.Replace the curl-to-shell command with explicit download, checksum verification, and reviewed installation steps.
- FIX-002HighPrivileged tunnel service examples can alter host persistence.Add clear warnings and require manual approval before running systemd or sudo commands from the references.
- FIX-003HighDynamic execution examples may be copied into application code.Prefer safer APIs, constrain inputs, and label exec or eval examples as non-production demonstrations.
- FIX-004MediumStatic review cappedManually review the omitted 2583 static analyzer matches or reduce bundled generated/vendor/reference content before enabling automatic publication.
- FIX-005MediumMany examples mention secrets, certificates, tokens, and environment variables.Keep placeholder values clearly fake and remind users never to paste real credentials into prompts or source files.
Expert evidence
Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.
Artifact subject
- Marketplace commit
- 7db9b9f06e0ab79c575b58bc48c4d8dc9849f424
- Content hash
- 99be50a67ea1dbae086af3f2bac668c38dd57f71b25ed11f754827a7f206a89d
- Tree hash
- 07223ec22ee790a616e1f5e6db55566bcea63a350fff9536501c9740ef38a4c4
- Skill path
- skills/cloudflare/cloudflare
- Audit payload hash
- c9086e3f8d81879cfa1e0f861387ad04
Analysis metadata
Audit model: claude
Analysis state: Complete
Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.
Verify and export
The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.
Audit attestation: not_attestable