Workflows Patterns
Guides users on implementing durable workflows for multi-step processing and data pipelines using Cloudflare Workflows.
Install this skill
Security score
The Workflows Patterns skill was audited on May 15, 2026 and we found 22 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 65 | const path = `documents/${documentId}.txt`; |
Template literal with variable interpolation in command context
| 116 | `articles/${articleId}.json`, |
Template literal with variable interpolation in command context
| 245 | id: `ingest-${articleId}`, |
Template literal with variable interpolation in command context
| 311 | - `store-${articleId}` (bad - step names should be static) |
Template literal with variable interpolation in command context
| 390 | await this.env.STORAGE.delete(`temp/${workflowId}`); |
Access to .env file
| 66 | await this.env.STORAGE.put(path, content); |
Access to .env file
| 72 | const result = await this.env.DATABASE |
Access to .env file
| 115 | await this.env.ARTICLES_BUCKET.put( |
Access to .env file
| 126 | await this.env.DATABASE |
Access to .env file
| 143 | await this.env.DATABASE |
Access to .env file
| 155 | const result = await this.env.AI.run('@cf/baai/bge-base-en-v1.5', { |
Access to .env file
| 168 | await this.env.VECTOR_INDEX.upsert(vectors); |
Access to .env file
| 187 | const chunkSize = this.env.DEFAULT_CHUNK_SIZE || 500; |
Access to .env file
| 188 | const overlap = this.env.DEFAULT_CHUNK_OVERLAP || 100; |
Access to .env file
| 324 | await this.env.VECTOR_INDEX.upsert(vectors); |
Access to .env file
| 327 | await this.env.VECTOR_INDEX.insert(vectors); |
Access to .env file
| 341 | const result = await this.env.AI.run(model, { text: batch }); |
Access to .env file
| 355 | const existing = await this.env.DATABASE |
Access to .env file
| 375 | this.env.DATABASE.prepare('...').run(), |
Access to .env file
| 376 | this.env.STORAGE.put('...', data) |
Access to .env file
| 390 | await this.env.STORAGE.delete(`temp/${workflowId}`); |
External URL reference
| 406 | - Cloudflare Workflows documentation: https://developers.cloudflare.com/workflows/ |