A connection to Cloudflare for managing website DNS, caching, traffic delivery, web-attack protection, and edge diagnostics. Cloudflare is a service that sits between visitors and a website to help route and protect traffic.

Use it to list domains, inspect DNS records and analytics, review threats and HTTP errors, control cached content, and apply Cloudflare configuration changes.

It brings DNS records, traffic data, security events, and cache controls into the coding agent, so you can investigate and correct edge and delivery problems in one place.

cloudflare — Skill for Claude Code by Arvo-AI/aurora

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add Arvo-AI/aurora --skill cloudflare

Clone the repo

git clone --depth 1 https://github.com/Arvo-AI/aurora

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/arvo-ai/aurora/cloudflare/github.svg)](https://agentmods.dev/skills/arvo-ai/aurora/cloudflare)

Your own site

<a href="https://agentmods.dev/skills/arvo-ai/aurora/cloudflare"><img src="https://agentmods.dev/badge/skills/arvo-ai/aurora/cloudflare/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/arvo-ai/aurora/cloudflare"><img src="https://agentmods.dev/badge/skills/arvo-ai/aurora/cloudflare.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 31 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,701 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector pass 7 Sept 2026

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00031	$0.01701
Opus 5.5	$0.00012	$0.00680
Sonnet 5.5	$0.00006	$0.00340
Haiku 4.5	$0.00003	$0.00170

Measured 16d ago against content hash d5b9f33aba1d, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

cloudflare scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 16d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

server/chat/backend/agent/skills/integrations/cloudflare/SKILL.md · 89 lines

How it starts

The opening of the file, as written. The whole thing — 89 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Cloudflare Integration

Overview

Cloudflare is connected for DNS, CDN, WAF, and edge diagnostics with full remediation capabilities.

Instructions

IMPORTANT -- NO CLI SUPPORT

Do NOT use cloud_exec('cloudflare', ...) -- there is no Cloudflare CLI connector.
Use the dedicated query_cloudflare, cloudflare_list_zones, and cloudflare_action tools instead.

OBSERVATION TOOLS (read-only)

List zones: cloudflare_list_zones() -- discover all zones with IDs, names, and status.
DNS records: query_cloudflare(resource_type='dns_records', zone_id='...') -- list A, AAAA, CNAME, MX, TXT records.
Analytics: query_cloudflare(resource_type='analytics', zone_id='...') -- traffic, bandwidth, threats, HTTP status codes, content types, HTTP versions, SSL protocols, IP classification.
- Pass since (e.g. '-60' for last hour, or ISO-8601) and until (ISO-8601) to control the time window.
- Bucket granularity is auto-selected: minute buckets for <=100 min, hourly for <=100 h, daily beyond that.
- Default limit=50 returns a bucketed time-series (e.g., last 24h yields multiple hourly buckets). Set limit=1 to force a single aggregate covering the entire window.
Security events: query_cloudflare(resource_type='firewall_events', zone_id='...') -- recent WAF blocks, challenges, JS challenges.
Firewall rules: query_cloudflare(resource_type='firewall_rules', zone_id='...') -- WAF custom rules (expression, action, enabled) in evaluation order, plus account_level: rules deployed from the account to this zone (Enterprise).
Rate limits: query_cloudflare(resource_type='rate_limits', zone_id='...') -- rate limiting rules: ratelimit.requests_per_period per period seconds, counted by characteristics, mitigation_timeout, plus account-level ones.
Managed WAF: query_cloudflare(resource_type='managed_rules', zone_id='...') -- which WAF managed rulesets are deployed and their overrides (disabled rules, downgraded actions).
Rules that replaced Page Rules: query_cloudflare(resource_type='redirect_rules' | 'cache_rules' | 'config_rules' | 'origin_rules' | 'transform_rules', zone_id='...') -- single redirects, cache rules, configuration rules, origin rules (host/port/SNI overrides), URL rewrite and header transform rules.
Zone settings: query_cloudflare(resource_type='zone_settings', zone_id='...') -- ALL zone settings (security level, caching, dev mode, WAF, TLS version, minification, etc.).
Page rules: query_cloudflare(resource_type='page_rules', zone_id='...') -- legacy Page Rules only; Cloudflare is migrating them into the rules above, so an empty answer is normal.
Workers: query_cloudflare(resource_type='workers') -- Workers scripts across every account the token can see.
Load balancers: query_cloudflare(resource_type='load_balancers', zone_id='...') -- LB config, pools, failover.
SSL/TLS: query_cloudflare(resource_type='ssl', zone_id='...') -- TLS mode (off/flexible/full/strict) and cert status.
Healthchecks: query_cloudflare(resource_type='healthchecks', zone_id='...') -- origin health monitors.

Read the full file on GitHub · 89 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

16d ago Changed · +3 lines d5b9f33aba1d
1mo ago First seen · 86 lines · 31 tokens per session scan A 788fefa7f6b8

Subscribe to this mod's changes

cloudflare is a skill published in the GitHub repository Arvo-AI/aurora (443 stars, last pushed yesterday), licensed Apache-2.0. It adds 31 tokens to every session and 1,701 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Analytics and metrics Debugging DevOps and cloud Security aiops aws azure cloud_provider datadog gcp

deslop

Remove AI-generated artifacts from code. Three-phase certainty-graded cleanup. Use after any AI implementation session or before PR creation.

elasticdotventures/_b00t_ · 28 tokens

ak-test

Set up testing and debug common issues in Agent Kernel projects. This skill guides you through configuring the built-in test framework, writing agent tests, choosing test modes (score, llm, fallback), and troubleshooting common errors.

yaalalabs/agent-kernel · 47 tokens

aws-health-events

ALWAYS use this skill in the beginning of any incident investigation, root cause analysis, or operational troubleshooting. This skill retrieves and analyzes AWS Health events (service issues, scheduled changes, and account notifications) to identify AWS-side events that may explain or correlate with observed…

aws/tools-for-devops-agent · 159 tokens

database-rds-devops

Database-level data-plane diagnostics for Aurora MySQL and Aurora PostgreSQL. Executes predefined read-only health check queries via RDS Data API to analyze buffer pool, connections, locks, replication, storage, performance, and index efficiency. Requires the rds-aidba MCP server for database-internal access beyond…

aws/tools-for-devops-agent · 75 tokens

database-migration-service-expertise

AWS Database Migration Service (DMS) operational review and troubleshooting skill. Conducts best practices validation, health assessments, performance diagnostics, cost optimization reviews, and migration cutover guidance. Triggers on requests like "DMS review", "DMS health check", "DMS troubleshooting", "migration…

aws/tools-for-devops-agent · 99 tokens

support-cases

ALWAYS use this skill in the beginning of any incident investigation, root cause analysis, or operational troubleshooting. This skill retrieves and analyzes AWS Support cases (open and resolved) to find historical incidents with similar symptoms, error patterns, or affected services. Activate this skill when…

aws/tools-for-devops-agent · 132 tokens