Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add thewolffish/wolffish-app --skill cloudflaredgit clone --depth 1 https://github.com/thewolffish/wolffish-appWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/thewolffish/wolffish-app/cloudflared)<a href="https://agentmods.dev/skills/thewolffish/wolffish-app/cloudflared"><img src="https://agentmods.dev/badge/skills/thewolffish/wolffish-app/cloudflared/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/thewolffish/wolffish-app/cloudflared"><img src="https://agentmods.dev/badge/skills/thewolffish/wolffish-app/cloudflared.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00012 | $0.00656 |
| Opus 5.5 | $0.00005 | $0.00262 |
| Sonnet 5.5 | $0.00002 | $0.00131 |
| Haiku 4.5 | $0.00001 | $0.00066 |
Grade A, and why
cloudflared scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Cloudflared
Usage
Use cloudflared_check to verify cloudflared is installed. If missing,
call cloudflared_install (requires user approval) — it's managed-first and
needs no admin rights: it reuses a global cloudflared if present, else downloads
the official no-root binary into ~/.wolffish/bin/cloudflared. Only use
cloudflared_install_system if the user explicitly wants a global install.
Use cloudflared_tunnel with a local port number to create a quick tunnel.
This starts cloudflared in the background and returns a public URL like
https://random-name.trycloudflare.com that routes to localhost:{port}.
Rules
- Always confirm with the user before exposing a local service to the internet.
- The tunnel runs in the background. Save the PID from the response to stop it later.
- Quick tunnels use random subdomains and don't require a Cloudflare account.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +1 lines c5b7d5fe8dc6
- 1mo ago First seen · 88 lines · 12 tokens per session scan A 70fc86d6467d
cloudflared is a skill published in the GitHub repository thewolffish/wolffish-app (5 stars, last pushed 22d ago), licensed MIT. It adds 12 tokens to every session and 656 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
agent-computer-use
REQUIRED for any task that involves operating a desktop application — opening apps, clicking buttons, typing into fields, pressing keys, scrolling, dragging, reading what's on screen, moving or resizing windows, or verifying state after an action. Always use the agent-cu CLI commands (open, snapshot, click, type, key…
server-control
Gives Claude full control over a remote Linux machine via SSH. Use when the user asks to run commands, check server status, manage services, edit files, control Docker, restart services, view logs, or do anything else on the remote machine. Trigger phrases: "run on server", "check the server", "restart", "deploy"…
linkerd-patterns
Implement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments. Use when setting up Linkerd, configuring traffic policies, or implementing zero-trust networking with minimal overhead.
cost-optimization
Optimize cloud costs across AWS, Azure, GCP, and OCI through resource rightsizing, tagging strategies, reserved instances, and spending analysis. Use when reducing cloud expenses, analyzing infrastructure costs, or implementing cost governance policies.
istio-traffic-management
Configure Istio traffic management including routing, load balancing, circuit breakers, and canary deployments. Use when implementing service mesh traffic policies, progressive delivery, or resilience patterns.
tcapi
A helper for managing Tencent Cloud resources through Tencent Cloud's command-line API tool. Tencent Cloud is a cloud-services provider offering products such as virtual servers, storage, networks, and containers.