prepare-cloudflare-production-deployment

prepare-cloudflare-production-deployment is a skill for Codex from LubomirGeorgiev/cloudflare-workers-nextjs-saas-template. It costs 72 tokens per session (5,090 once invoked), scanned A, original, MIT.

A runbook for preparing a Vinext web application to run in production on Cloudflare Workers, with related GitHub deployment settings.

In plain words
What is it for?
Preparing or auditing Cloudflare resources, Worker bindings and secrets, Turnstile, email sending, and GitHub Actions deployment configuration.
Why use it?
It gives one documented process for checking deployment resources, settings, secrets, and account access instead of relying on guesses or scattered instructions.

Skill for Codex

Written for Codex: agents/openai.yaml present. Also seen: installed under .agents/ (shared by several agents); mentions AGENTS.md.

Good fit Preparing or auditing Cloudflare resources, Worker bindings and secrets, Turnstile, email sending, and GitHub Actions deployment configuration.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add LubomirGeorgiev/cloudflare-workers-nextjs-saas-template --skill prepare-cloudflare-production-deployment
Clone the repo
git clone --depth 1 https://github.com/LubomirGeorgiev/cloudflare-workers-nextjs-saas-template

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for prepare-cloudflare-production-deployment

README.md
[![agentmods](https://agentmods.dev/badge/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment/github.svg)](https://agentmods.dev/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment)
Your own site
<a href="https://agentmods.dev/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment"><img src="https://agentmods.dev/badge/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for prepare-cloudflare-production-deployment

Your own site · 80×15
<a href="https://agentmods.dev/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment"><img src="https://agentmods.dev/badge/skills/lubomirgeorgiev/cloudflare-workers-nextjs-saas-template/prepare-cloudflare-production-deployment.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 72 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 5,090 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Excessive Agency · line 212
    Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
    Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00072 $0.05090
Opus 5 $0.00036 $0.02545
Sonnet 5 $0.00014 $0.01018
Haiku 4.5 $0.00007 $0.00509

Measured 2d ago against content hash 44554ad06b9d, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

prepare-cloudflare-production-deployment scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

Cloudflare MCP is not optional for Cloudflare operations. Always try it first for account/resource reads and supported writes. Wrangler, raw `curl`, and dashboard instructions are fallback paths only.
.agents/skills/prepare-cloudflare-production-deployment/SKILL.md · 279 lines

How it starts

The opening of the file, as written. The whole thing — 279 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Prepare Cloudflare Production

Overview

Use this skill as the source of truth for production deployment. Cloudflare MCP must be used for Cloudflare account/resource discovery, verification, and supported mutations before using Wrangler, raw API calls, dashboard instructions, or assumptions. Use gh for GitHub repository secrets/variables; edit repo files directly for project branding, wrangler.jsonc, and workflow changes.

Never print secret values. Ask for missing secret values instead of inventing placeholders, and confirm before creating paid, destructive, or externally visible resources.

Preflight

  1. Read wrangler.jsonc, package.json, .github/workflows/deploy.yml, src/constants.ts, src/utils/root-metadata.ts, src/components/footer.tsx, AGENTS.md, and cms.config.ts when relevant.
  2. Check GitHub auth, then complete the MCP availability gate before any Cloudflare mutation:
gh auth status
gh repo view --json nameWithOwner,url

Report the Cloudflare account id/name/email from MCP and the GitHub account/repository from gh, then ask whether both are correct. Stop if the user says either account is wrong.

  1. Confirm or remind the user about the required production customization checklist:
    • src/constants.ts has project details.
    • Read SITE_URL from src/constants.ts, derive the hostname, and check the domains/zones available in the authenticated Cloudflare account. Tell the user which matching or closest Cloudflare zone/domain was found and ask them to confirm it before proceeding. If the SITE_URL domain is not available in Cloudflare, stop and ask the user which Cloudflare zone/domain to use or whether they need to add the domain to Cloudflare first.
    • When the app will use Cloudflare Images, verify Images against that same production zone/hostname, not only against the account. Confirm the SITE_URL hostname belongs to a Cloudflare zone in the authenticated account and is proxied or attached as the Worker custom domain/route that production will use. Then verify the account-level Images API works for that account with /accounts/{account_id}/images/v1/variants or /accounts/{account_id}/images/v1/stats. If custom-domain image delivery is expected, explicitly confirm the production zone can serve Images URLs at https://<SITE_URL_HOSTNAME>/cdn-cgi/imagedelivery/<ACCOUNT_HASH>/<IMAGE_ID>/<VARIANT_NAME>; Cloudflare supports this only for customer domains under the same account as the Images account. If the domain is in a different account, not proxied through Cloudflare, or not the domain being deployed to, stop and ask which zone/domain should be used before proceeding.
    • Read package.json, tell the user the current name value, and ask them to confirm it is the intended production project name. This value controls generated deploy-size metrics and package metadata, so do not proceed if it still identifies the reused template. If the name is still cloudflare-workers-nextjs-saas-template, stop and ask the user for the real project name and production domain before editing Cloudflare resources, queue names, bindings, or deployment metadata.
    • Check queue names in wrangler.jsonc, especially queues.producers[].queue and queues.consumers[].queue. Queue names must be renamed to match the new production project name; do not leave template queue names such as cloudflare-workers-nextjs-saas-template-scheduler in a production project unless the user explicitly confirms that is the real project name.
    • Email Sending must follow the Email Sending procedure below: use the production SITE_URL zone, expect notifications.<SITE_URL_HOSTNAME>, and get user confirmation before Cloudflare or wrangler.jsonc changes.
    • AGENTS.md has the project specification for AI coding agents.
    • src/components/footer.tsx has project links and details.
    • src/app/globals.css color palette has been reviewed.
    • src/utils/root-metadata.ts metadata has project details; both root layouts read it.
    • The meta titles and descriptions in every locale catalog under src/i18n/messages/*.json (for example Client.Landing.meta, plus the auth, legal, and blog meta blocks) still default to template copy. Explicitly ask the user for the production titles and descriptions, and help them update these values in all locale catalogs, not only en.json.
    • cms.config.ts has been reviewed and updated if needed.

Read the full file on GitHub · 279 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago Changed 44554ad06b9d
  2. 12d ago First seen · 279 lines · 72 tokens per session scan A bde142aa81f4

Subscribe to this mod's changes

prepare-cloudflare-production-deployment is a skill published in the GitHub repository LubomirGeorgiev/cloudflare-workers-nextjs-saas-template (779 stars, last pushed today), licensed MIT. It adds 72 tokens to every session and 5,090 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

portaljs-deploy

Deploy a PortalJS portal to PortalJS Arc — Datopian-managed static hosting on Cloudflare. Builds a static export, uploads it, and returns a live SLUG.arc.portaljs.com URL. One command, one target. Use when a portal is ready to publish or redeploy to a live URL.

datopian/portaljs · 66 tokens

cloudflare-workers-mcp

Software Development MCP server by Cloudflare.

Friz-zy/ai-capability-registry · 14 tokens

review-configuration

Config, env, wrangler review. USE WHEN: user runs /review-configuration or explicitly asks for this review. DO NOT USE WHEN: implementing features or fixing bugs unless the user asked for a review.

louisbrulenaudet/monorepo-template · 46 tokens

review-wrangler

Wrangler/Workers config review (wrangler.jsonc files, compatibility dates, bindings, observability, generated types) against current official Cloudflare best practices. USE WHEN: user runs /review-wrangler or explicitly asks for this review. DO NOT USE WHEN: reviewing app code, other dev dependencies, or implementing…

louisbrulenaudet/monorepo-template · 71 tokens

wrangler

Cloudflare Workers CLI for deploying, developing, and managing Workers, KV, R2, D1, Vectorize, Hyperdrive, Workers AI, Containers, Queues, Workflows, Pipelines, and Secrets Store. Load before running wrangler commands to ensure correct syntax and best practices. Biases towards retrieval from Cloudflare docs over…

louisbrulenaudet/monorepo-template · 75 tokens

workers-best-practices

Reviews and authors Cloudflare Workers code against production best practices. Load when writing new Workers, reviewing Worker code, configuring wrangler.jsonc, or checking for common Workers anti-patterns (streaming, floating promises, global state, secrets, bindings, observability). Biases towards retrieval from…

louisbrulenaudet/monorepo-template · 72 tokens