PRODUCT SELECTION / Cloudflare
Cloudflare product discovery
Pins Cloudflare's product-discovery skill, which blocks a new Wrangler setup, runs cf migrate only when asked, and says a version rollback does not restore resource data.
“Discover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security. Use for architecture and product selection, including when the user describes a need without naming a Cloudflare product; then find the relevant skill or documentation.”
01 / THE REASONING
Why this made the selection.
- A project that is not already on Wrangler must stay on cf: the file says not to install Wrangler or create a Wrangler configuration file, and to run cf migrate only when the user asks.
- It separates a Worker version rollback from resource data, requires a least-privilege role or token scope, and says Worker secrets are bound without committing the values.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- skills/cloudflare/SKILL.md
- README.md
- plugin.json
- LICENSE
Our findings
- Projects that are not already Wrangler projects are told to use cf, and not to install Wrangler or create a Wrangler configuration file.
- cf migrate is allowed only when the user asks.
- Existing Pages deployments are preserved during unrelated maintenance.
- A Worker version rollback is described as not restoring connected resource data.
- Access guidance says to choose a least-privilege role and a supported token scope, and Worker secrets are bound without committing the values.
- Artifacts is described as closed beta, with access confirmed before implementation, and Dynamic Workers guidance says to check bindings, egress controls, and resource limits.
Not established by this review
- The resource was not executed and its tools were not called.
- No cf or Wrangler command was run, and no secret was bound.
- The bundled product references and the Cloudflare MCP server were not reviewed.
- Not executed: it was not installed or run.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Add a skill to your workflow.
DOCUMENTED COMMAND
npx skills add cloudflare/skillsRun in your terminal to choose your AI tools, project or global scope, and installation method. This short command follows the current upstream version; the review covers the revision shown above.
Optional: install the reviewed revision
Keeps the original source and installer version where recorded, while leaving your AI tools and installation scope for you to choose.
npx skills add https://github.com/cloudflare/skills- The repository README shows `npx skills add https://github.com/cloudflare/skills`. That installs from the repository, not this one file.
- Claude Code's documented alternative is `/plugin marketplace add cloudflare/skills` followed by `/plugin install cloudflare@cloudflare`.
- The README says the native plugin installs both the guidance and the Cloudflare MCP server. This review did not install either.
Before you start
- Node.js with npx if the skills CLI command is used
- An agent that can read an Agent Skills directory
- A Cloudflare account only if an operator later applies the guidance
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
- cloudflare SKILL.md ↗Checked
https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/skills/cloudflare/SKILL.md
Supports: Wrangler refusal, cf migrate gate, Pages preservation, rollback limit, least-privilege access, and secret binding
- Repository README ↗Checked
https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/README.md
Supports: Repository skills install line and the plugin command that also names the MCP server
- Plugin manifest ↗Checked
https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/plugin.json
Supports: plugin.json license field Apache-2.0
- Repository LICENSE ↗Checked
https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/LICENSE
Supports: Apache License Version 2.0
https://raw.githubusercontent.com/cloudflare/skills/53395984c3ea1925d00fce03b266112302f050e6/skills/cloudflare/SKILL.md
Supports: upstreamDescription, review.notTested, review.reviewedAt
https://raw.githubusercontent.com/cloudflare/skills/53395984c3ea1925d00fce03b266112302f050e6/README.md
Supports: install.command