cloudflare

cloudflare is a skill for Claude Code, Codex from andresquirogadev/skillsense. It costs 0 tokens per session (528 once invoked), scanned A, original, MIT.

A set of conventions for Cloudflare Workers and Pages, which run web code on Cloudflare's edge network. It covers request handlers, environment bindings, secrets, runtime settings, and storage such as KV and D1.

In plain words
What is it for?
Use it when developing or deploying Cloudflare Workers or Pages. It guides Worker entry points, wrangler.toml settings, secrets, KV data, D1 SQLite databases, migrations, and Durable Object or R2 bindings.
Why use it?
It prevents common deployment mistakes, such as using Node.js environment variables in Workers or configuring storage without the required bindings.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it when developing or deploying Cloudflare Workers or Pages. It guides Worker entry points, wrangler.toml settings, secrets, KV data, D1 SQLite databases, migrations, and Durable Object or R2 bindings.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/andresquirogadev/skillsense/cloudflare
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add andresquirogadev/skillsense --skill cloudflare
Clone the repo
git clone --depth 1 https://github.com/andresquirogadev/skillsense

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for cloudflare

README.md
[![agentmods](https://agentmods.dev/badge/skills/andresquirogadev/skillsense/cloudflare/github.svg)](https://agentmods.dev/skills/andresquirogadev/skillsense/cloudflare)
Your own site
<a href="https://agentmods.dev/skills/andresquirogadev/skillsense/cloudflare"><img src="https://agentmods.dev/badge/skills/andresquirogadev/skillsense/cloudflare/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for cloudflare

Your own site · 80×15
<a href="https://agentmods.dev/skills/andresquirogadev/skillsense/cloudflare"><img src="https://agentmods.dev/badge/skills/andresquirogadev/skillsense/cloudflare.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 528 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.00528
Opus 5 $0.00000 $0.00264
Sonnet 5 $0.00000 $0.00106
Haiku 4.5 $0.00000 $0.00053

Measured 8d ago against content hash dbd3b7f233d4, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

cloudflare scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
packages/catalog/skills/cloudflare/SKILL.md · 52 lines

How it starts

The opening of the file, as written. The whole thing — 52 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Cloudflare Skill

You are working with Cloudflare Workers / Pages. Apply these conventions.

Workers

  • Workers run in the V8 isolate environment — no Node.js built-ins by default; use the compatibility flag nodejs_compat for Node.js API support.
  • Export a default object with a fetch handler:
    export default {
      async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
        return new Response('Hello');
      },
    };
    
  • Define the Env interface from wrangler.toml bindings — never use process.env in Workers.

wrangler.toml

  • Define KV namespaces, R2 buckets, D1 databases, and Durable Objects as bindings in wrangler.toml.
  • Use [vars] for non-secret env vars; use wrangler secret put for secrets.
  • Use compatibility_date to pin the runtime behavior; update periodically.

Cloudflare KV

  • KV is eventually consistent and best for read-heavy, infrequently written data.
  • Use env.KV.put(key, value, { expirationTtl: 3600 }) for TTL-based expiry.
  • Use env.KV.getWithMetadata(key) to retrieve value and metadata in one call.

Cloudflare D1 (SQLite)

  • Run migrations with wrangler d1 migrations apply DB_NAME.
  • Use the D1 client: await env.DB.prepare('SELECT * FROM users WHERE id = ?').bind(id).first().
  • Use .all() for multiple rows, .first() for a single row, .run() for mutations (INSERT/UPDATE/DELETE).

Cloudflare R2

  • R2 is S3-compatible object storage with no egress fees.
  • Upload: await env.BUCKET.put(key, body, { httpMetadata: { contentType: 'image/png' } }).
  • Generate pre-signed URLs with createPresignedUrl() from the S3-compatible API.

Pages

  • Cloudflare Pages Functions live in functions/ — they map to URL routes.
  • Use export const onRequestGet: PagesFunction<Env> = async (ctx) => { … }.
  • Share Env types between Workers and Pages Functions via a shared bindings.d.ts.

Security

  • Always validate cf-connecting-ip / CF-Ray headers carefully — they can be spoofed if Workers are called directly.
  • Use Cloudflare Access for protecting internal routes instead of custom auth.

Read the full file on GitHub · 52 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 52 lines · 0 tokens per session scan A dbd3b7f233d4

Subscribe to this mod's changes

cloudflare is a skill published in the GitHub repository andresquirogadev/skillsense (2 stars, last pushed 5mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 528 tokens. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

rework-rate

Measure and interpret PR rework rate — the emerging 5th DORA metric.

bradygaster/squad · 20 tokens

awesome-azd-template-submit

Submit an azd template to the awesome-azd gallery. Use when asked to submit, add, or contribute a template to awesome-azd. Requires only a GitHub repository URL — all metadata (title, description, languages, frameworks, Azure services, IaC) is auto-detected by the submission pipeline.

Azure/awesome-azd · 72 tokens

My Skill

Content here.

bradygaster/squad · 2 tokens

ralphctl-code-review-and-quality

Multi-phase code-quality skill — primary frame for the evaluator role in Execute, the architecture axis in Plan, and correctness/readability in Refine. Multi-axis code review with severity vocabulary. Use when you are the evaluator assessing a generator's output, and when reviewing any change before signalling…

lukas-grigis/ralphctl · 76 tokens

ralphctl-test-driven-development

Execute-phase skill — write the failing test before the code that makes it pass; for bug fixes, this is the reproduction test itself. Use for any logic change, bug fix, or behavioural modification; for the full root-cause triage pipeline around an unexpected failure, see ralphctl-debugging-and-error-recovery.

lukas-grigis/ralphctl · 72 tokens

ralphctl-idea-refinement

Ideation skill — refine a raw, unshaped idea into a sharp, buildable concept through divergent expansion (variation lenses like inversion, simplification, audience shift) followed by convergent stress-testing (user value, feasibility, differentiation), ending in a one-pager with explicit assumptions and a "Not Doing"…

lukas-grigis/ralphctl · 121 tokens