Skills wrangler Audit History
📦

Audit History

wrangler - 9 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v9 LatestJul 5, 2026, 12:00 PM 1 confirmed0No capability change
v8 Jul 5, 2026, 12:00 PM 1 confirmed0No capability change
v7 Jun 29, 2026, 05:13 PM No confirmed findings3No capability change
v6 Jan 21, 2026, 05:32 PM No confirmed findings0No capability change
v5 Jan 17, 2026, 03:28 AM No confirmed findings0No capability change
v4 Jan 17, 2026, 03:28 AM No confirmed findings0External commands
v3 Jan 10, 2026, 02:02 PM No confirmed findings0No capability change
v2 Jan 10, 2026, 02:02 PM No confirmed findings0No capability change
v1 Jan 10, 2026, 02:02 PM No confirmed findings0Baseline

Jul 5, 2026, 12:00 PM

The static Ruby backtick findings are false positives caused by Markdown inline code and fenced bash examples in SKILL.md. No prompt injection attempt or hidden executable source code was found. The skill is a legitimate Wrangler command reference, but several examples can modify Cloudflare resources or handle secrets and should require user confirmation.

1
Files scanned
123
Lines analyzed
2
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
Privileged Cloudflare Operations Require Confirmation
The skill includes commands for deploying Workers, writing KV entries, uploading R2 objects, applying D1 migrations, deploying Pages, and setting secrets. These are legitimate Wrangler operations, but they can change cloud resources or expose sensitive data if run without explicit user approval.
The cited commands directly perform deployments, storage writes, migrations, and secret updates. The risk depends on execution context, so confidence is high for operational impact but not for malicious intent.
Audited by: codex

Jul 5, 2026, 12:00 PM

The static Ruby backtick findings are false positives caused by Markdown inline code and fenced bash examples in SKILL.md. No prompt injection attempt or hidden executable source code was found. The skill is a legitimate Wrangler command reference, but several examples can modify Cloudflare resources or handle secrets and should require user confirmation.

1
Files scanned
123
Lines analyzed
2
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
Privileged Cloudflare Operations Require Confirmation
The skill includes commands for deploying Workers, writing KV entries, uploading R2 objects, applying D1 migrations, deploying Pages, and setting secrets. These are legitimate Wrangler operations, but they can change cloud resources or expose sensitive data if run without explicit user approval.
The cited commands directly perform deployments, storage writes, migrations, and secret updates. The risk depends on execution context, so confidence is high for operational impact but not for malicious intent.
Audited by: codex

Jun 29, 2026, 05:13 PM

The static Ruby backtick and weak cryptography findings are false positives caused by Markdown code fences, inline backticks, and Cloudflare product names. The skill is a legitimate Wrangler CLI reference, but many documented commands can change Cloudflare production resources, query data, upload files, deploy applications, or set secrets when used with an authenticated account.

1
Files scanned
123
Lines analyzed
4
Review items
2
False positives ignored
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Authenticated Cloudflare Resource Modification Commands
The skill documents Wrangler commands that deploy Workers, modify KV values, upload R2 objects, run D1 migrations, deploy Pages directories, and set secrets. These are legitimate Cloudflare operations, but they can affect production resources if followed without review.
The commands are explicit Wrangler operations that can write, deploy, upload, migrate, or set secrets. They are normal for a Wrangler skill, so the concern is operational impact rather than malicious intent.
Medium
Secret Handling Through Shell Pipeline
The documented secret example pipes a placeholder secret value into Wrangler. This avoids storing the value in the skill, but users could expose real secrets through shell history, terminal logs, or copied prompts if they paste sensitive values directly.
The example is a standard Wrangler workflow and uses a placeholder value. The risk depends on how users substitute real secrets in their local shell.
Low
Cloudflare Resource Enumeration Commands
The skill includes commands that list deployments, KV namespaces, KV keys, R2 buckets, D1 databases, Pages projects, secrets, and the current Cloudflare identity. These commands are legitimate but may reveal account metadata to anyone with terminal access.
The command examples clearly enumerate Cloudflare resources and identity information. No evidence shows exfiltration or unauthorized access beyond normal authenticated CLI output.
Static false positives ignored (2)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

Low
Dismissed Static Pattern: Markdown Backticks
The external command alerts for Ruby or shell backtick execution are false positives. SKILL.md contains Markdown inline code and fenced command examples, not Ruby source or executable script logic.
The reviewed file is Markdown documentation with code fences. There is no Ruby file, shell script, or automatic execution wrapper in the analyzed file.
Low
Dismissed Static Pattern: Weak Cryptography
The weak cryptographic algorithm alert at the description line is a false positive. The text references Cloudflare product names such as R2 and D1, not cryptographic functions or hashing algorithms.
Line 3 is front matter description text and contains no cryptographic operation. The finding appears to come from matching product names rather than code.

Detected Patterns

Wrangler Commands Can Mutate Remote Services
Audited by: codex

Jan 21, 2026, 05:32 PM

All static findings are false positives. The skill provides documentation for the legitimate Cloudflare wrangler CLI tool. Detected patterns (command references, infrastructure listings, crypto mentions) are standard devops documentation content, not malicious code. This is a legitimate infrastructure management skill with no security concerns.

2
Files scanned
766
Lines analyzed
1
Review items
0
False positives ignored
Audited by: claude

Jan 10, 2026, 02:02 PM

This skill contains only documentation in SKILL.md. No executable code, scripts, network operations, file system access, or environment variable reads were detected. Pure prompt-based skill with zero attack surface.

1
Files scanned
123
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 10, 2026, 02:02 PM

This skill contains only documentation in SKILL.md. No executable code, scripts, network operations, file system access, or environment variable reads were detected. Pure prompt-based skill with zero attack surface.

1
Files scanned
123
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude

Jan 10, 2026, 02:02 PM

This skill contains only documentation in SKILL.md. No executable code, scripts, network operations, file system access, or environment variable reads were detected. Pure prompt-based skill with zero attack surface.

1
Files scanned
123
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude