cloudflare/skills

Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.

Content hash

sha256:fa526fd5cf47ba4b87511f21c7ee94a9f84d82810f53e7e5bc15030a200f02fa

Files

14

Quality

100/100

Security findings

• mediumUploads data to a remote hostSL203 · skills/turnstile-spin/SKILL.md:333
  | `EXPECTED_HOSTNAME` mismatch | Update widget domains via PUT, not PATCH (PATCH returns `10405 Method not allowed`): `curl -X PUT .../widget…

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host.

• mediumUploads data to a remote hostSL203 · skills/turnstile-spin/scripts/auth-probe.sh:179
  curl --disable --config - --silent --show-error --write-out $'\n%{http_code}' -X POST \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host.

• mediumUploads data to a remote hostSL203 · skills/turnstile-spin/scripts/widget-create.sh:66
  curl --disable --config - --silent --show-error --write-out $'\n%{http_code}' -X POST \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host.

• lowHides actions from the userSL102 · skills/turnstile-spin/SKILL.md:55
  Do not ask the user to paste the API token into chat. When auth is established, re-run `auth-probe.sh` and resume from Step 4.

  The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

• lowHides actions from the userSL102 · skills/turnstile-spin/SKILL.md:144
  - Do not ask the user to paste a Turnstile secret. Retrieve and store it without printing it.

  The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

• lowHides actions from the userSL102 · skills/turnstile-spin/SKILL.md:148
  ### Hard scope boundary: DO NOT ask the user about

  The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · skills/turnstile-spin/references/vanilla-html.md:85
  r = requests.post('https://challenges.cloudflare.com/turnstile/v0/siteverify',

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

Build and troubleshoot Cloudflare Basin analytics workflows with Basin Pipelines, Basin Catalog, and Basin SQL. Use for streaming data into R2 Iceberg tables, managing catalogs, or querying those tables; also use for requests using the former Data Platform, Pipelines, R2 Data Catalog, or R2 SQL names.

Content hash

sha256:08d8e8c609564f6eb0d3433c74a68865de6b6d9f0c8324b5e58a7ad062322973

Files

16

Quality

100/100

Security findings

• lowUploads data to a remote hostSL203 · skills/basin/references/pipelines/api.md:36
  curl -X POST https://{stream-id}.ingest.cloudflare.com \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · skills/basin/references/pipelines/api.md:41
  curl -X POST https://{stream-id}.ingest.cloudflare.com \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · skills/basin/references/pipelines/api.md:113
  curl -s -X POST \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · skills/basin/references/pipelines/configuration.md:69
  curl -X POST "$BASE_URL/streams" -H "Authorization: Bearer $API_TOKEN" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · skills/basin/references/pipelines/configuration.md:77
  curl -X POST "$BASE_URL/sinks" -H "Authorization: Bearer $API_TOKEN" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · skills/basin/references/pipelines/configuration.md:87
  curl -X POST "$BASE_URL/pipelines" -H "Authorization: Bearer $API_TOKEN" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · skills/basin/references/pipelines/patterns.md:93
  curl -X POST "https://api.cloudflare.com/client/v4/graphql" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · skills/basin/references/sql/configuration.md:35
  curl -X POST \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · skills/basin/references/sql/patterns.md:26
  body = requests.post(API, headers=HEADERS, json={"query": query}, timeout=180).json()

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · skills/basin/references/sql/patterns.md:37
  curl -X POST \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/pipelines/README.md:43
  npx wrangler basin pipelines setup

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/pipelines/api.md:32
  Get `{stream-id}` from `npx wrangler basin pipelines streams list`.

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/pipelines/configuration.md:32
  npx wrangler basin pipelines setup # creates stream + sink + pipeline, optionally bucket + catalog

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/pipelines/configuration.md:39
  npx wrangler basin pipelines streams create my_stream --schema-file schema.json

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/pipelines/configuration.md:42
  npx wrangler basin pipelines sinks create my_sink \

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/pipelines/configuration.md:49
  npx wrangler basin pipelines sinks create my_sink \

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/pipelines/configuration.md:55
  npx wrangler basin pipelines create my_pipeline \

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/pipelines/configuration.md:108
  > Binding field is `"stream"` as of June 2026 (was `"pipeline"`, still accepted). Use the **stream ID** (`wrangler basin pipelines streams list`), not the pipe…

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/pipelines/patterns.md:109
  npx wrangler basin pipelines streams create events_v2 --schema-file v2.json

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/sql/README.md:26
  | Wrangler | `npx wrangler basin sql query "{WAREHOUSE}" "<SQL>"` with `WRANGLER_BASIN_SQL_AUTH_TOKEN` set |

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/sql/README.md:34
  npx wrangler basin catalog enable my-bucket # 1. enable catalog

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/sql/README.md:36
  npx wrangler basin sql query "$ACCOUNT_ID"_my-bucket \

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/sql/api.md:14
  CLI: `npx wrangler basin sql query "{WAREHOUSE}" "<SQL>"` (with `WRANGLER_BASIN_SQL_AUTH_TOKEN`).

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/sql/configuration.md:16
  npx wrangler basin catalog enable my-bucket

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/sql/configuration.md:44
  npx wrangler basin sql query "${ACCOUNT_ID}_my-bucket" "SHOW DATABASES"

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/sql/configuration.md:45
  npx wrangler basin sql query "${ACCOUNT_ID}_my-bucket" "SHOW TABLES IN default"

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/sql/patterns.md:10
  npx wrangler basin sql query "${ACCOUNT_ID}_my-bucket" "

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/sql/patterns.md:75
  npx wrangler secret put R2_SQL_TOKEN

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/basin/references/sql/patterns.md:114
  After `npx wrangler basin pipelines setup` (Basin Catalog destination), wait for first flush (3–7 min), then query the table. See [pipelines/patterns.md](../pi…

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

Implement or troubleshoot Cloudflare Email Sending and Email Routing integrations and their delivery configuration.

Content hash

sha256:5aaaed7abd8d01cbe58832beb95398fd138d31fd36b39079ffe3ed3b163d1cef

Files

6

Quality

100/100

Security findings

• lowUnpinned package installSL501 · skills/cloudflare-email-service/SKILL.md:27
  1. **Domain onboarded?** Run `npx wrangler email sending list` to see which domains have email sending enabled. If the domain isn't listed, run `npx wrangler e…

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

• lowUploads data to a remote hostSL203 · skills/cloudflare-email-service/references/deliverability.md:128
  curl -X POST "https://api.cloudflare.com/client/v4/accounts/{account_id}/email/sending/suppression" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare-email-service/references/cli-and-mcp.md:5
  For full CLI reference, run `npx wrangler email --help`. For Dashboard setup, see the [getting started docs](https://developers.cloudflare.com/email-service/ge…

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare-email-service/references/cli-and-mcp.md:35
  npx wrangler email sending enable yourdomain.com

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare-email-service/references/cli-and-mcp.md:36
  npx wrangler email sending dns get yourdomain.com # Verify records

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare-email-service/references/cli-and-mcp.md:48
  npx wrangler dev

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare-email-service/references/cli-and-mcp.md:106
  npx wrangler email sending send \

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare-email-service/references/routing.md:24
  The `message` parameter is a `ForwardableEmailMessage`. Run `npx wrangler types` to get the full type definition. Key properties and methods:

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

Build, debug, or review Cloudflare Agents SDK applications using the agents package.

Content hash

sha256:3f027b7798cdd3decc09d038dfe0f00311aa774ba12230cf0e4103cc21602c8d

Files

20

Quality

100/100

Security findings

• lowUnpinned package installSL501 · skills/agents-sdk/SKILL.md:81
  npm install agents

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

• infoUnpinned package installSL501 · skills/agents-sdk/references/configuration.md:57
  npx wrangler types

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/agents-sdk/references/think.md:8
  npm install @cloudflare/think

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/agents-sdk/references/voice.md:8
  npm install @cloudflare/voice

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/agents-sdk/references/webhooks-push.md:48
  npm install web-push

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/agents-sdk/references/webhooks-push.md:86
  VAPID keys: generate with `npx web-push generate-vapid-keys`, store as secrets.

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

Cloudflare's official cf CLI (beta) for the public Cloudflare API and Workers projects. Use for finding and running Cloudflare commands from the terminal — sign-in and profiles, cf cli search, cf schema, cf deploy/dev/build, resource commands for DNS, zones, D1, KV, and R2 — and for choosing between cf and Wrangler in a project.

Content hash

sha256:2e6ca7999941089a5c0cddb2e6e70a6098268681f2bfb4b646eb840190b0acce

Files

1

Quality

100/100

Security findings

• lowUnpinned package installSL501 · skills/cf-cli/SKILL.md:86
  - Live logs: `npx wrangler tail <WORKER_NAME>`.

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

• lowUnpinned package installSL501 · skills/cf-cli/SKILL.md:87
  - A single secret: `npx wrangler secret put <SECRET_NAME> --name <WORKER_NAME>`. Or upload secrets with a new Worker version by passing `--secrets-file <PATH>`…

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

Build, migrate, and deploy Next.js apps on Cloudflare Workers with vinext. Use when starting a Next.js project on Cloudflare, moving an existing app to Workers, choosing between vinext and OpenNext, or setting up vinext for Workers. For setup, migration, or deployment, install vinext's upstream skills with `npx skills add cloudflare/vinext` if missing, then read and follow the applicable skill and docs.

Content hash

sha256:cf86d61afb6c452d60d5bab32d72fac6ffbbbeb56a20ce36ad81a4d7aae20137

Files

1

Quality

100/100

Security findings

• lowUnpinned package installSL501 · skills/nextjs-on-cloudflare/SKILL.md:3
  description: Build, migrate, and deploy Next.js apps on Cloudflare Workers with vinext. Use when starting a Next.js project on Cloudflare, moving an existing a…

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

• lowUnpinned package installSL501 · skills/nextjs-on-cloudflare/SKILL.md:24
  npx skills add cloudflare/vinext

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

Migrate Cloudflare Sandbox apps from stable @cloudflare/sandbox to @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-next for apps already on the preview.

Content hash

sha256:af7c621680bf2d4ac109d28e43472d2469ca01b52a78974cdb3949fce990a6a8

Files

1

Quality

100/100

Security findings

• lowUnpinned package installSL501 · skills/sandbox-migrate-to-next/SKILL.md:157
  npx wrangler deploy --containers-rollout=immediate

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3).

Run or troubleshoot Wrangler CLI commands in projects that have a wrangler.jsonc, wrangler.json, or wrangler.toml file, including local development, Previews, deployment, and resource management. For new projects and projects without a Wrangler configuration file, use the cf CLI instead.

Content hash

sha256:71998af89a2b85492b1abd015518a218cddc5b4f467fabccf388bd99129855f3

Files

1

Quality

100/100

Security findings

• lowHides actions from the userSL102 · skills/wrangler/SKILL.md:49
  - Before a remote command, identify the authenticated member or API token and retrieve the current role and scope required for the exact operation. Prefer the …

  The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

Discover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security. Use for architecture and product selection, including when the user describes a need without naming a Cloudflare product; then find the relevant skill or documentation.

Content hash

sha256:7f343b2f275b4a473914f431e15a83d63c8273c5028768190f2f04c58483e3cd

Files

139

Quality

100/100

Security findings

• infoUnpinned package installSL501 · skills/cloudflare/references/c3/configuration.md:38
  npx wrangler kv namespace create MY_KV # Returns real ID

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare/references/c3/configuration.md:39
  npx wrangler d1 create my-database # Returns real database_id

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare/references/c3/configuration.md:81
  6. Add secrets: `npx wrangler secret put SECRET_NAME`

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare/references/c3/gotchas.md:10
  npx wrangler kv namespace create MY_KV # Get real ID

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare/references/c3/gotchas.md:16
  **Fix:** `npx wrangler login` or set `CLOUDFLARE_API_TOKEN`

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · skills/cloudflare/references/c3/gotchas.md:88
  | Not authenticated | No login | `npx wrangler login` |

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

Design, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments. Use cloudflare-one-migrations for migration planning from other vendors.

Content hash

sha256:ed9bb5de49847f6cc1e7e173d2804b6cc55afa93d4ecf43e79421203753726d6

Files

1

Quality

100/100

Security findings

None of the 30 rules matched.

Assess and plan migrations from existing VPN, SWG, or SASE platforms to Cloudflare One, including policy mapping, parity gaps, and rollout.

Content hash

sha256:9380a1b082e5137215e1df5d541fd657ab0f23e3f047913a8ef287cd7a1e0511

Files

1

Quality

100/100

Security findings

None of the 30 rules matched.

Build, debug, or review Cloudflare Durable Objects code for persistent state and coordination.

Content hash

sha256:714dc9de0fd3af5972ceba1531cc476da84c3ae172d4a0e3072169cffdb5add6

Files

4

Quality

100/100

Security findings

None of the 30 rules matched.

Build, debug, or review Cloudflare Workers invoked by the Forward action in Gateway HTTP policies, including the GatewayMiddleware entrypoint, Gateway types, context, and continuation.

Content hash

sha256:d1eed16b89c2b3fc8e41d8467c90f604145d7dbd8f0b218c05a8739c721acc94

Files

1

Quality

100/100

Security findings

None of the 30 rules matched.

Build and troubleshoot Cloudflare K2 or K2 Streams durable logs. Use for stream setup, producing from Workers or HTTP, configuring retention and inputs, and consuming through subscriptions.

Content hash

sha256:d3fd47f89abbf6e77bf7c0402e640ef46eb6f97f78dc4276826061884598b6a5

Files

1

Quality

100/100

Security findings

None of the 30 rules matched.

Build or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-migrate-to-next when porting a stable app.

Content hash

sha256:83f66ed93d4b28d492292a9e4a76872ae33014869553c19fe8e79e3e8b8d28f4

Files

3

Quality

100/100

Security findings

None of the 30 rules matched.

Build or maintain Cloudflare Sandbox apps on the stable @cloudflare/sandbox package. Use sandbox-next for preview apps and sandbox-migrate-to-next for stable-to-preview migrations.

Content hash

sha256:5e0b43770061e6fcce1f0afbc7233112facdb0cf148c3f549ebde377bfe2fc2d

Files

1

Quality

100/100

Security findings

None of the 30 rules matched.

Audit, diagnose, or optimize website loading and interaction performance, Core Web Vitals, and Lighthouse performance scores.

Content hash

sha256:2eb8f338be1814078bfea023fae2032a1c5a313e7dc84d114791a0c35b8f8ee0

Files

1

Quality

100/100

Security findings

None of the 30 rules matched.

Cloudflare Workers best practices for production applications. Use when writing, reviewing, or configuring Workers.

Content hash

sha256:3432446a72e91f5a2c5fd8ad56a2dadd6c567cec5d5da6f8899964fa0deb3b63

Files

4

Quality

100/100

Security findings

None of the 30 rules matched.

Profile or debug CPU usage and memory allocation in deployed Cloudflare Workers and Durable Objects. Then use this information to optimize your code.

Content hash

sha256:86eb1d46884a0c80b1f33cf495131e327f2993288b9b2e1e5186db33d3960905

Files

1

Quality

100/100

Security findings

None of the 30 rules matched.