Are cloudflare skills safe?
We index 19 public skills from cloudflare. 18 graded A, 1 graded B. Each one is pinned to its content hash and rescanned nightly.
- A
agents-sdk
3.1kcloudflare/skills
Build, debug, or review Cloudflare Agents SDK applications using the agents package.
1 low - A
basin
3.1kcloudflare/skills
Build and troubleshoot Cloudflare Basin analytics workflows with Basin Pipelines, Basin Catalog, and Basin SQL. Use for streaming data into R2 Iceberg tables, managing catalogs, or querying those tables; also use for requests using the former Data Platform, Pipelines, R2 Data Catalog, or R2 SQL names.
10 low - A
cf-cli
3.1kcloudflare/skills
Cloudflare's official cf CLI (beta) for the public Cloudflare API and Workers projects. Use for finding and running Cloudflare commands from the terminal — sign-in and profiles, cf cli search, cf schema, cf deploy/dev/build, resource commands for DNS, zones, D1, KV, and R2 — and for choosing between cf and Wrangler in a project.
2 low - A
cloudflare
3.1kcloudflare/skills
Discover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security. Use for architecture and product selection, including when the user describes a need without naming a Cloudflare product; then find the relevant skill or documentation.
No security findings - A
cloudflare-email-service
3.1kcloudflare/skills
Implement or troubleshoot Cloudflare Email Sending and Email Routing integrations and their delivery configuration.
2 low - A
cloudflare-one
3.1kcloudflare/skills
Design, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments. Use cloudflare-one-migrations for migration planning from other vendors.
No security findings - A
cloudflare-one-migrations
3.1kcloudflare/skills
Assess and plan migrations from existing VPN, SWG, or SASE platforms to Cloudflare One, including policy mapping, parity gaps, and rollout.
No security findings - A
durable-objects
3.1kcloudflare/skills
Build, debug, or review Cloudflare Durable Objects code for persistent state and coordination.
No security findings - A
gateway-workers
3.1kcloudflare/skills
Build, debug, or review Cloudflare Workers invoked by the Forward action in Gateway HTTP policies, including the GatewayMiddleware entrypoint, Gateway types, context, and continuation.
No security findings - A
k2
3.1kcloudflare/skills
Build and troubleshoot Cloudflare K2 or K2 Streams durable logs. Use for stream setup, producing from Workers or HTTP, configuring retention and inputs, and consuming through subscriptions.
No security findings - A
nextjs-on-cloudflare
3.1kcloudflare/skills
Build, migrate, and deploy Next.js apps on Cloudflare Workers with vinext. Use when starting a Next.js project on Cloudflare, moving an existing app to Workers, choosing between vinext and OpenNext, or setting up vinext for Workers. For setup, migration, or deployment, install vinext's upstream skills with `npx skills add cloudflare/vinext` if missing, then read and follow the applicable skill and docs.
2 low - A
sandbox-migrate-to-next
3.1kcloudflare/skills
Migrate Cloudflare Sandbox apps from stable @cloudflare/sandbox to @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-next for apps already on the preview.
1 low - A
sandbox-next
3.1kcloudflare/skills
Build or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-migrate-to-next when porting a stable app.
No security findings - A
sandbox-stable
3.1kcloudflare/skills
Build or maintain Cloudflare Sandbox apps on the stable @cloudflare/sandbox package. Use sandbox-next for preview apps and sandbox-migrate-to-next for stable-to-preview migrations.
No security findings - B
turnstile-spin
3.1kcloudflare/skills
Set up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.
3 medium4 low - A
web-perf
3.1kcloudflare/skills
Audit, diagnose, or optimize website loading and interaction performance, Core Web Vitals, and Lighthouse performance scores.
No security findings - A
workers-best-practices
3.1kcloudflare/skills
Cloudflare Workers best practices for production applications. Use when writing, reviewing, or configuring Workers.
No security findings - A
workers-profiling
3.1kcloudflare/skills
Profile or debug CPU usage and memory allocation in deployed Cloudflare Workers and Durable Objects. Then use this information to optimize your code.
No security findings - A
wrangler
3.1kcloudflare/skills
Run or troubleshoot Wrangler CLI commands in projects that have a wrangler.jsonc, wrangler.json, or wrangler.toml file, including local development, Previews, deployment, and resource management. For new projects and projects without a Wrangler configuration file, use the cf CLI instead.
1 low