--- title: "Cloudflare product discovery: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/skills/cloudflare-cloudflare/ description: "Pins Cloudflare's product-discovery skill, which blocks a new Wrangler setup, runs cf migrate only when asked, and says a version rollback does not restore resource data." --- # Cloudflare product discovery: review, setup & limitations · Undominated.ai > Pins Cloudflare's product-discovery skill, which blocks a new Wrangler setup, runs cf migrate only when asked, and says a version rollback does not restore resource data. [← Explore all skills](/skills/) PRODUCT SELECTION / Cloudflare # Cloudflare product discovery Pins Cloudflare's product-discovery skill, which blocks a new Wrangler setup, runs cf migrate only when asked, and says a version rollback does not restore resource data. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/cloudflare/skills/tree/53395984c3ea1925d00fce03b266112302f050e6/skills/cloudflare) SOURCE REVIEW Reviewed 2026-10-15 Evidence 6 linked sources Publisher Cloudflare Licence [Apache-2.0 ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/LICENSE) Revision 53395984c3ea [Read what was—and wasn’t—checked ↓](#review) “Discover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security. Use for architecture and product selection, including when the user describes a need without naming a Cloudflare product; then find the relevant skill or documentation.” [Cloudflare · upstream description ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/skills/cloudflare/SKILL.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - A project that is not already on Wrangler must stay on cf: the file says not to install Wrangler or create a Wrangler configuration file, and to run cf migrate only when the user asks. - It separates a Worker version rollback from resource data, requires a least-privilege role or token scope, and says Worker secrets are bound without committing the values. ### A good fit for - Choosing a Cloudflare product for an existing project without installing Wrangler or migrating unless the user asks ### Weigh up before choosing - The product table still names the wrangler skill for C3. The CLI section says that where the table names a Wrangler command or file, the cf equivalent is used instead of translating from memory. - `npx skills add https://github.com/cloudflare/skills` adds skills from the whole repository, not this file alone. - `/plugin install cloudflare@cloudflare` installs the plugin group. The README says that plugin also includes the Cloudflare MCP server, which this review did not inspect. - Bundled references under skills/cloudflare/references were not opened. No plugin README sits above this skill. - This review did not execute the resource. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - skills/cloudflare/SKILL.md - README.md - plugin.json - LICENSE ### Our findings - Projects that are not already Wrangler projects are told to use cf, and not to install Wrangler or create a Wrangler configuration file. - cf migrate is allowed only when the user asks. - Existing Pages deployments are preserved during unrelated maintenance. - A Worker version rollback is described as not restoring connected resource data. - Access guidance says to choose a least-privilege role and a supported token scope, and Worker secrets are bound without committing the values. - Artifacts is described as closed beta, with access confirmed before implementation, and Dynamic Workers guidance says to check bindings, egress controls, and resource limits. ### Not established by this review - The resource was not executed and its tools were not called. - No cf or Wrangler command was run, and no secret was bound. - The bundled product references and the Cloudflare MCP server were not reviewed. - Not executed: it was not installed or run. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Add a skill to your workflow. [Upstream setup instructions ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/README.md) DOCUMENTED COMMAND npx skills add cloudflare/skills Copy command ↗ Run in your terminal to choose your AI tools, project or global scope, and installation method. This short command follows the current upstream version; the review covers the revision shown above. Optional: install the reviewed revision Keeps the original source and installer version where recorded, while leaving your AI tools and installation scope for you to choose. npx skills add https://github.com/cloudflare/skills Copy reviewed-revision command ↗ - The repository README shows `npx skills add https://github.com/cloudflare/skills`. That installs from the repository, not this one file. - Claude Code's documented alternative is `/plugin marketplace add cloudflare/skills` followed by `/plugin install cloudflare@cloudflare`. - The README says the native plugin installs both the guidance and the Cloudflare MCP server. This review did not install either. ### Before you start - Node.js with npx if the skills CLI command is used - An agent that can read an Agent Skills directory - A Cloudflare account only if an operator later applies the guidance ### Compatibility Claude Code · Codex · Cursor · GitHub Copilot · OpenCode · OpenAI Codex · Pi · VS Code ### Local skill text; Cloudflare account changes happen only if an operator runs cf or Wrangler - Read the skill text - Install Wrangler only when the project already uses it or the user asks - Bind Worker secrets or change roles only if an operator runs those account commands ### Cost model Apache-2.0; no Cloudflare command was run 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [cloudflare SKILL.md ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/skills/cloudflare/SKILL.md) Checked 2026-10-14 https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/skills/cloudflare/SKILL.md Supports: Wrangler refusal, cf migrate gate, Pages preservation, rollback limit, least-privilege access, and secret binding - [Repository README ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/README.md) Checked 2026-10-14 https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/README.md Supports: Repository skills install line and the plugin command that also names the MCP server - [Plugin manifest ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/plugin.json) Checked 2026-10-14 https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/plugin.json Supports: plugin.json license field Apache-2.0 - [Repository LICENSE ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/LICENSE) Checked 2026-10-14 https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/LICENSE Supports: Apache License Version 2.0 - [2026-10-15 W37 source re-review at the existing pin ↗](https://raw.githubusercontent.com/cloudflare/skills/53395984c3ea1925d00fce03b266112302f050e6/skills/cloudflare/SKILL.md) Checked 2026-10-15 https://raw.githubusercontent.com/cloudflare/skills/53395984c3ea1925d00fce03b266112302f050e6/skills/cloudflare/SKILL.md Supports: upstreamDescription, review.notTested, review.reviewedAt - [2026-10-15 W37 source re-review at the existing pin ↗](https://raw.githubusercontent.com/cloudflare/skills/53395984c3ea1925d00fce03b266112302f050e6/README.md) Checked 2026-10-15 https://raw.githubusercontent.com/cloudflare/skills/53395984c3ea1925d00fce03b266112302f050e6/README.md Supports: install.command KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Cloudflare cf CLI ↗ Pins Cloudflare's cf CLI skill, which tells an agent to search the local command index and to keep Wrangler when a Wrangler config is already present.](/skills/cloudflare-cf-cli/)[### Cloudflare Sandbox preview migration ↗ Pins Cloudflare's stable-to-preview Sandbox migration, which refuses an unagreed production cutover and forbids invented APIs and live secrets in the sandbox environment.](/skills/cloudflare-sandbox-migrate-to-next/)[### Cloudflare Wrangler Workflow ↗ Runs Wrangler work in projects that already have a Wrangler configuration file, against the installed Wrangler version and an explicitly identified target.](/skills/cloudflare-wrangler/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Choose a toolkit](/tools/) - [Inspect execution hosts](/agents/) - [Check tool access](/mcp-servers/) - [Check project dependencies](/check-repo/)