Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add LubomirGeorgiev/cloudflare-workers-nextjs-saas-template --skill prepare-cloudflare-production-deploymentgit clone --depth 1 https://github.com/LubomirGeorgiev/cloudflare-workers-nextjs-saas-templateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment)<a href="https://agentmods.dev/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment"><img src="https://agentmods.dev/badge/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment"><img src="https://agentmods.dev/badge/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 212 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00072 | $0.05090 |
| Opus 5 | $0.00036 | $0.02545 |
| Sonnet 5 | $0.00014 | $0.01018 |
| Haiku 4.5 | $0.00007 | $0.00509 |
Grade A, and why
prepare-cloudflare-production-deployment scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
Cloudflare MCP is not optional for Cloudflare operations. Always try it first for account/resource reads and supported writes. Wrangler, raw `curl`, and dashboard instructions are fallback paths only. How it starts
The opening of the file, as written. The whole thing — 279 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Prepare Cloudflare Production
Overview
Use this skill as the source of truth for production deployment. Cloudflare MCP must be used for Cloudflare account/resource discovery, verification, and supported mutations before using Wrangler, raw API calls, dashboard instructions, or assumptions. Use gh for GitHub repository secrets/variables; edit repo files directly for project branding, wrangler.jsonc, and workflow changes.
Never print secret values. Ask for missing secret values instead of inventing placeholders, and confirm before creating paid, destructive, or externally visible resources.
Preflight
- Read
wrangler.jsonc,package.json,.github/workflows/deploy.yml,src/constants.ts,src/utils/root-metadata.ts,src/components/footer.tsx,AGENTS.md, andcms.config.tswhen relevant. - Check GitHub auth, then complete the
MCP availability gatebefore any Cloudflare mutation:
gh auth status
gh repo view --json nameWithOwner,url
Report the Cloudflare account id/name/email from MCP and the GitHub account/repository from gh, then ask whether both are correct. Stop if the user says either account is wrong.
- Confirm or remind the user about the required production customization checklist:
src/constants.tshas project details.- Read
SITE_URLfromsrc/constants.ts, derive the hostname, and check the domains/zones available in the authenticated Cloudflare account. Tell the user which matching or closest Cloudflare zone/domain was found and ask them to confirm it before proceeding. If theSITE_URLdomain is not available in Cloudflare, stop and ask the user which Cloudflare zone/domain to use or whether they need to add the domain to Cloudflare first. - When the app will use Cloudflare Images, verify Images against that same production zone/hostname, not only against the account. Confirm the
SITE_URLhostname belongs to a Cloudflare zone in the authenticated account and is proxied or attached as the Worker custom domain/route that production will use. Then verify the account-level Images API works for that account with/accounts/{account_id}/images/v1/variantsor/accounts/{account_id}/images/v1/stats. If custom-domain image delivery is expected, explicitly confirm the production zone can serve Images URLs athttps://<SITE_URL_HOSTNAME>/cdn-cgi/imagedelivery/<ACCOUNT_HASH>/<IMAGE_ID>/<VARIANT_NAME>; Cloudflare supports this only for customer domains under the same account as the Images account. If the domain is in a different account, not proxied through Cloudflare, or not the domain being deployed to, stop and ask which zone/domain should be used before proceeding. - Read
package.json, tell the user the currentnamevalue, and ask them to confirm it is the intended production project name. This value controls generated deploy-size metrics and package metadata, so do not proceed if it still identifies the reused template. If the name is stillcloudflare-workers-nextjs-saas-template, stop and ask the user for the real project name and production domain before editing Cloudflare resources, queue names, bindings, or deployment metadata. - Check queue names in
wrangler.jsonc, especiallyqueues.producers[].queueandqueues.consumers[].queue. Queue names must be renamed to match the new production project name; do not leave template queue names such ascloudflare-workers-nextjs-saas-template-schedulerin a production project unless the user explicitly confirms that is the real project name. - Email Sending must follow the
Email Sendingprocedure below: use the productionSITE_URLzone, expectnotifications.<SITE_URL_HOSTNAME>, and get user confirmation before Cloudflare orwrangler.jsoncchanges. AGENTS.mdhas the project specification for AI coding agents.src/components/footer.tsxhas project links and details.src/app/globals.csscolor palette has been reviewed.src/utils/root-metadata.tsmetadata has project details; both root layouts read it.- The
metatitles and descriptions in every locale catalog undersrc/i18n/messages/*.json(for exampleClient.Landing.meta, plus the auth, legal, and blogmetablocks) still default to template copy. Explicitly ask the user for the production titles and descriptions, and help them update these values in all locale catalogs, not onlyen.json. cms.config.tshas been reviewed and updated if needed.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed 44554ad06b9d
- 12d ago First seen · 279 lines · 72 tokens per session scan A bde142aa81f4
prepare-cloudflare-production-deployment is a skill published in the GitHub repository LubomirGeorgiev/cloudflare-workers-nextjs-saas-template (779 stars, last pushed today), licensed MIT. It adds 72 tokens to every session and 5,090 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
portaljs-deploy
Deploy a PortalJS portal to PortalJS Arc — Datopian-managed static hosting on Cloudflare. Builds a static export, uploads it, and returns a live SLUG.arc.portaljs.com URL. One command, one target. Use when a portal is ready to publish or redeploy to a live URL.
cloudflare-workers-mcp
Software Development MCP server by Cloudflare.
review-configuration
Config, env, wrangler review. USE WHEN: user runs /review-configuration or explicitly asks for this review. DO NOT USE WHEN: implementing features or fixing bugs unless the user asked for a review.
review-wrangler
Wrangler/Workers config review (wrangler.jsonc files, compatibility dates, bindings, observability, generated types) against current official Cloudflare best practices. USE WHEN: user runs /review-wrangler or explicitly asks for this review. DO NOT USE WHEN: reviewing app code, other dev dependencies, or implementing…
wrangler
Cloudflare Workers CLI for deploying, developing, and managing Workers, KV, R2, D1, Vectorize, Hyperdrive, Workers AI, Containers, Queues, Workflows, Pipelines, and Secrets Store. Load before running wrangler commands to ensure correct syntax and best practices. Biases towards retrieval from Cloudflare docs over…
workers-best-practices
Reviews and authors Cloudflare Workers code against production best practices. Load when writing new Workers, reviewing Worker code, configuring wrangler.jsonc, or checking for common Workers anti-patterns (streaming, floating promises, global state, secrets, bindings, observability). Biases towards retrieval from…