Built a ChatGPT-to-Cloudflare publisher, looking security input, or collab

A developer created a ChatGPT-to-Cloudflare publisher, a "Plugin" for ChatGPT's web UI, designed for "zero-click" website publishing by sending data directly to a user's Cloudflare account. This system runs as an MCP server within Cloudflare Workers. The developer is seeking security input, particularly on how to assure users that the code installed in their Cloudflare Workers is not malicious, especially for the installer part. OAuth is used for service communication, and no data flows through the developer's server post-setup, but initial user trust remains a key concern.

This report uniquely highlights a developer's specific security concerns regarding user trust for a new ChatGPT-to-Cloudflare publisher, unlike general discussions of AI plugin development.