Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add alivirgo/Major-AI-Skills --skill cloudflare-dnsgit clone --depth 1 https://github.com/alivirgo/Major-AI-SkillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/alivirgo/major-ai-skills/cloudflare-dns)<a href="https://agentmods.dev/skills/alivirgo/major-ai-skills/cloudflare-dns"><img src="https://agentmods.dev/badge/skills/alivirgo/major-ai-skills/cloudflare-dns/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/alivirgo/major-ai-skills/cloudflare-dns"><img src="https://agentmods.dev/badge/skills/alivirgo/major-ai-skills/cloudflare-dns.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00045 | $0.02171 |
| Opus 5.5 | $0.00018 | $0.00868 |
| Sonnet 5.5 | $0.00009 | $0.00434 |
| Haiku 4.5 | $0.00005 | $0.00217 |
Grade A, and why
cloudflare-dns scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s -X GET "https://api.cloudflare.com/client/v4/zones/${ZONE_ID}/dns_records?per_page=100" \ How it starts
The opening of the file, as written. The whole thing — 179 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Cloudflare DNS AI Skill Guide (Claude)
Overview & Engine Architecture
Cloudflare DNS is authoritative for a zone. Proxied (orange cloud) A/AAAA/CNAME records send HTTP(S) through Cloudflare’s edge (anycast IPs to clients; origin hidden). DNS-only (grey cloud) returns origin addresses. Only A / AAAA / CNAME can be proxied; MX/TXT/etc. are always DNS-only. Proxied records use Auto TTL (~300s, not editable). Agents inventory/export before edits, choose proxy mode by traffic type, lower TTL ahead of grey-record migrations, and use zone-scoped API tokens—never Global API keys in automation.
┌─────────────────────────────────────────────────────────────┐
│ Cloudflare DNS resolution │
│ │
│ Registrar NS → Cloudflare authoritative zone │
│ │
│ Record types │
│ ├── A / AAAA / CNAME → Proxied (orange) → CF edge → origin │
│ ├── A / AAAA / CNAME → DNS-only (grey) → origin IP/name │
│ └── MX / TXT / CAA / NS … → always DNS-only │
│ │
│ Ops controls │
│ ├── TTL: editable when DNS-only; Auto when proxied │
│ ├── API: Bearer token (Zone DNS Edit) — not Global Key │
│ └── Mixed A/AAAA on same name: one proxied ⇒ all treated │
│ as proxied │
└─────────────────────────────────────────────────────────────┘
When to use / when not to
Use when
- Creating/updating A/AAAA/CNAME/MX/TXT/CAA records; planning cutovers and low-TTL rehearsals.
- Choosing proxied vs DNS-only for web, APIs, mail, or validation records.
- Automating DNS via Cloudflare API with least-privilege tokens.
Do not use when
- The task is full WAF / Workers / Tunnel app design beyond DNS → stop or use broader Cloudflare product skills/docs.
- Certificate issuance details dominate →
@lets-encrypt(still coordinate DNS-01 / HTTP-01 with proxy mode). - Someone asks to delete apex records without traffic owners, paste Global API keys into git, or invent account tokens → refuse.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · +64 lines · +18 tokens per session 855a71c93de7
- 1mo ago Changed · -7 tokens per session 398ee6418747
- 1mo ago First seen · 115 lines · 34 tokens per session scan A 890b9fb54292
cloudflare-dns is a skill published in the GitHub repository alivirgo/Major-AI-Skills (2 stars, last pushed today), licensed MIT. It adds 45 tokens to every session and 2,171 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
dns
DNS record management, Cloudflare API automation, TTL strategy, Let's Encrypt DNS challenges, split-horizon DNS, and resolver debugging for production domains.
origin-ip-discovery
Discover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs.
nettools
A collection of network and domain lookup tools for checking reachability, registration details, DNS records, and domain prices. DNS is the system that maps names such as example.com to services, while RDAP provides domain registration information.
cloudflare-expert
Expert-level Cloudflare Workers, CDN, edge computing, and security services. Use when the user mentions edge computing, CDN, workers, or WAF, or when the task involves Cloudflare Services or Developer Tools.
dns-security
Performs a structured DNS security review against NIST SP 800-81 Rev 2 (Secure Domain Name System Deployment Guide) and CIS Controls v8 (Control 9.2 -- Use DNS Filtering Services). Auto-invoked when reviewing DNS configurations, DNSSEC deployment, or investigating DNS-based exfiltration and tunneling indicators.…
cdn-cache-control-headers
Designing HTTP cache headers that work correctly across browsers, CDNs, and shared proxies — Cache-Control directives per RFC 9111, stale-while-revalidate and stale-if-error per RFC 5861, the Vary header for varying responses, and surrogate keys for tag-based purging. Grounded in IETF RFCs and Cloudflare/Fastly docs.