Skip to content
cccskills
FreePublished on GitHub

cloudflare

Cloudflare as a platform: Workers and static sites, R2 object storage, Zero Trust (Tunnel and Access) for internal tools, plus WAF and DNS basics. Set up, deploy or review a Cloudflare project with wrangler.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3 stars(GitHub 3 + cccskills 0)
Works withCloudflare

Run score Not tested

See how to install

Files included (4)

  • SKILL.md3.2 KB
  • references/r2.md1.8 KB
  • references/workers.md2.5 KB
  • references/zero-trust.md2.0 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Cloudflare

Cloudflare beyond the CDN: running code at the edge (Workers), storing files without egress fees (R2), and exposing internal tools without opening ports (Tunnel + Access). Caching rules and purges are in /cdn-setup.

Phase 1: Scope

ModeDoes
workersA Worker or a full-stack app (static assets + API) with wrangler: config, bindings, secrets, environments, deploy
r2Buckets, access from Workers or the S3 API, presigned URLs, public access through a custom domain
zero-trustCloudflare Tunnel to publish an origin with no public IP, and Access policies in front of internal tools
reviewChecks an existing account or project against the baseline in Phase 3 and gives a verdict

Read wrangler.jsonc / wrangler.toml, package.json and the deploy workflow first. Check the installed wrangler version (npx wrangler --version): config keys and defaults change between majors.

Phase 2: References

ProductReference
Workers and static assets (and Pages projects)references/workers.md
R2references/r2.md
Tunnel and Accessreferences/zero-trust.md

Read only the one in scope.

Phase 3: Account baseline

AreaBaseline
DNSRecords proxied (orange cloud) for anything served through Cloudflare; no DNS-only record exposing the origin IP of a proxied service
TLSSSL/TLS mode Full (strict); Always Use HTTPS; minimum TLS 1.2
OriginReachable only from Cloudflare: a Tunnel, or a firewall allowing Cloudflare's IP ranges only
WAFManaged rules on; rate limiting on login, signup and other abuse-prone endpoints
Access to the accountMembers with the narrowest role, SSO or 2FA required; API tokens scoped to one zone or account and the permissions they need, never the Global API Key
CIDeploys with wrangler using a scoped API token stored as a CI secret

Phase 4: Verdict (review mode)

VerdictWhen
PASSBaseline met; secrets in Worker secrets, not in config; internal tools behind Access
CONCERNSMissing WAF rate limits, broad API tokens, or a Worker without environments for staging
FAILOrigin reachable directly while proxied, Flexible SSL, secrets in wrangler config or the repo, an internal tool on the internet without Access

Protocol

  • Show config changes and ask "May I write these?" before editing wrangler config or workflows.
  • wrangler deploy, DNS changes and Access policy changes affect production: give the command and ask before running it.
  • Never paste API tokens or secret values into the conversation.

Next steps

  • /cdn-setup for cache rules and purging.
  • /ci-cd-setup for the deploy workflow.
  • /coding-agent-guardrails when Workers are deployed by agents or CI with broad tokens.

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Plan, design, and implement A/B tests and experiments with statistical rigor. Covers hypothesis frameworks, sample sizing, metrics, and result analysis.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

Web/mobile accessibility decision guide: WCAG 2.2 AA, ARIA, keyboard nav, focus management, contrast, testing. Use for: a11y, accessibility, wcag, aria, screen reader, keyboard, contrast.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

Generate, iterate, and scale ad creative for paid advertising across Google, Meta, LinkedIn, and X. Covers platform specs, creative frameworks, and quality validation.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

Musica interactiva para juegos: layering vertical, re-secuenciacion horizontal, stingers, reglas de transicion con sync points, y mapeo de estados de gameplay a musica. Usar para: musica adaptativa, sistema de musica dinamica, transiciones musicales, combat music.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

Design multi-agent systems, create agent architectures, define communication patterns, and build autonomous agent workflows with structured evaluation frameworks.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

Inter-agent communication protocol for C-suite agent teams. Defines invocation syntax, loop prevention, isolation rules, response formats, and quality loops.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

See all skills by SebastianLuser

Report a problem with this skill