Cloudflare

Cloudflare is a skill for Claude Code, Codex from danielmiessler/LifeOS. It costs 152 tokens per session (3,751 once invoked), scanned A, original, MIT.

A tool for deploying and managing Cloudflare services, including Workers, Pages, storage, DNS, and queues. Cloudflare is a cloud platform that runs websites, server code, and related services.

In plain words
What is it for?
Use it to deploy Workers or Pages, manage KV, R2, D1, DNS, and Queues, convert Wrangler projects to the Cloudflare command-line tool, and create Workers-based MCP servers.
Why use it?
It keeps Cloudflare commands and credentials in one controlled path instead of relying on whichever login or shell token happens to be active. It also checks that deployed services answer at their authoritative address.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: reads .claude/ paths.

Good fit Use it to deploy Workers or Pages, manage KV, R2, D1, DNS, and Queues, convert Wrangler projects to the Cloudflare command-line tool, and create Workers-based MCP servers.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/danielmiessler/lifeos/cloudflare
About the project

LifeOS is an AI-assisted personal operating system that records a person’s goals, values, context, and current situation to help move them toward a desired future state. It supports work such as building applications, starting businesses, and creative projects. Its catalogue entries extend the system through skills, hooks, agents, and commands.

danielmiessler/LifeOS · 19,637 stars · on GitHub · ourlifeos.ai

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add danielmiessler/LifeOS --skill cloudflare
Clone the repo
git clone --depth 1 https://github.com/danielmiessler/LifeOS

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for Cloudflare

README.md
[![agentmods](https://agentmods.dev/badge/skills/danielmiessler/lifeos/cloudflare/github.svg)](https://agentmods.dev/skills/danielmiessler/lifeos/cloudflare)
Your own site
<a href="https://agentmods.dev/skills/danielmiessler/lifeos/cloudflare"><img src="https://agentmods.dev/badge/skills/danielmiessler/lifeos/cloudflare/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for Cloudflare

Your own site · 80×15
<a href="https://agentmods.dev/skills/danielmiessler/lifeos/cloudflare"><img src="https://agentmods.dev/badge/skills/danielmiessler/lifeos/cloudflare.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 152 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,751 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00152 $0.03751
Opus 5.5 $0.00061 $0.01500
Sonnet 5.5 $0.00030 $0.00750
Haiku 4.5 $0.00015 $0.00375

Measured 2d ago against content hash 907f9aa1bafb, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

Cloudflare scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

LifeOS/install/skills/Cloudflare/SKILL.md · 129 lines

How it starts

The opening of the file, as written. The whole thing — 129 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Cloudflare Skill

Contents: Ideal State · Intent Routing · How It Works · Data & Config · Gotchas · Examples

Deploys and manages Cloudflare Workers, Pages, KV, R2, D1, DNS, and Queues with one tool, Cloudflare's cf CLI, run through LIFEOS/TOOLS/CfEnv.ts so the master token reaches the cf process and nothing else. A raw Cloudflare CLI call either runs on whatever token the calling shell exports (a shell profile that exports .env puts it in every interactive shell, the agent's Bash shell included), outside CfEnv's probes and review, or coasts on a stale OAuth login, which produces false "the token is dead, rotate it" diagnoses. This skill encodes one tool, one credential, one runner, and one set of verified probes so deploys and queries land the first time.

Ideal State

  • Every account-touching Cloudflare call runs through LIFEOS/TOOLS/CfEnv.ts, so the master token from .env reaches one cf process and nothing else: no raw cf or Wrangler write, no sourced .env, no OAuth fallback.
  • Whatever is deployed or created answers only on its authoritative URL (custom domain with workers.dev and previews off, or workers.dev when no domain exists). The report proves it live with a version ID and a probe, and the code review, new-zone baseline and registration gates were passed rather than overridden.
  • Reads and diagnoses come from live cf output in the same turn. An auth failure is traced through auth whoami and a scope-matching probe before any rotation is considered.
  • An MCP server built here is a stateless Worker that meets References/McpServerSpec.md.

Intent Routing

Intent Trigger File
Deploy Any Cloudflare write (deploy, secret, D1 migration or write, KV/R2 write, queue create, Pages deploy), an approved teardown, and converting a Wrangler project Intents/Deploy.md
Create Create a Worker or MCP server Intents/Create.md
Troubleshoot Deployment issues Intents/Troubleshoot.md
Query Cloudflare state (list workers, versions, KV, DNS, D1, logs, analytics), read-only via cf Intents/Query.md
Explorer Inspect Worker bindings/data live via Local Explorer Intents/Explorer.md

Read the full file on GitHub · 129 lines

Files

What ships with it

10 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 129 lines · 152 tokens per session scan A 907f9aa1bafb

Subscribe to this mod's changes

Cloudflare is a skill published in the GitHub repository danielmiessler/LifeOS (19,637 stars, last pushed 2d ago), licensed MIT. It adds 152 tokens to every session and 3,751 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-28.