--- title: "Cloudflare Sandbox preview migration: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/skills/cloudflare-sandbox-migrate-to-next/ description: "Pins Cloudflare's stable-to-preview Sandbox migration, which refuses an unagreed production cutover and forbids invented APIs and live secrets in the sandbox environment." --- # Cloudflare Sandbox preview migration: review, setup & limitations · Undominated.ai > Pins Cloudflare's stable-to-preview Sandbox migration, which refuses an unagreed production cutover and forbids invented APIs and live secrets in the sandbox environment. [← Explore all skills](/skills/) CLOUD OPERATIONS / Cloudflare # Cloudflare Sandbox preview migration Pins Cloudflare's stable-to-preview Sandbox migration, which refuses an unagreed production cutover and forbids invented APIs and live secrets in the sandbox environment. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/cloudflare/skills/tree/53395984c3ea1925d00fce03b266112302f050e6/skills/sandbox-migrate-to-next) SOURCE REVIEW Reviewed 2026-10-15 Evidence 5 linked sources Publisher Cloudflare Licence [Apache-2.0 ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/LICENSE) Revision 53395984c3ea [Read what was—and wasn’t—checked ↓](#review) “Migrate Cloudflare Sandbox apps from stable @cloudflare/sandbox to @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-next for apps already on the preview.” [Cloudflare · upstream description ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/skills/sandbox-migrate-to-next/SKILL.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The catalogue has sandbox-stable from this commit and not the migration off that stable package. - The file separates this port from new preview work and from day-to-day stable work, and it stops when a user decision is required. ### A good fit for - Porting an existing stable @cloudflare/sandbox Worker to the matching @next image after the user agrees to an immediate rollout ### Weigh up before choosing - This review did not execute the resource. - The README install line installs the repository's skills, not a sandbox-migrate-to-next-only flag. - Several distinct doc labels in the replacement table share the URL https://developers.cloudflare.com/sandbox/index.md. Those pages were not opened, so the table was not checked against current docs. - The README does not name a licence; the Apache-2.0 text is the root LICENSE at this commit. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - skills/sandbox-migrate-to-next/SKILL.md - README.md - LICENSE ### Our findings - The skill says not to force a production cutover without the user agreeing, and that production uses --containers-rollout=immediate because stable and @next protocols are incompatible. - It says not to invent gitCheckout, process stdin, or a string-exec completion helper, and that a self-deployed bridge stays on stable. - The validation list says no live secrets in the sandbox environment, and the red-flag list repeats that for setEnvVars and launch env. ### Not established by this review - The resource was not executed and its tools were not called. - No package was installed and wrangler deploy was not run. - The Cloudflare Sandbox documentation links were not opened. - No Worker was typechecked. - Not executed: it was not installed or run. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Add a skill to your workflow. [Upstream setup instructions ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/README.md) DOCUMENTED COMMAND npx skills add cloudflare/skills Copy command ↗ Run in your terminal to choose your AI tools, project or global scope, and installation method. This short command follows the current upstream version; the review covers the revision shown above. Optional: install the reviewed revision Keeps the original source and installer version where recorded, while leaving your AI tools and installation scope for you to choose. npx skills add https://github.com/cloudflare/skills Copy reviewed-revision command ↗ - The README's npx skills section is the command above and installs the repository's skills. - The skill table names sandbox-migrate-to-next as the port from stable Sandbox to @cloudflare/sandbox@next. - The same README also shows /plugin install cloudflare@cloudflare, which installs the plugin group. ### Before you start - A skills-compatible agent - An existing stable Sandbox app if the port is performed, which this review did not modify ### Compatibility Claude Code · OpenAI Codex · Cursor · GitHub Copilot · OpenCode · Pi · skills CLI ### Implementation typescript · shell ### Local skill text; a deploy needs the operator's Cloudflare credentials - Read the skill - Install the preview package only if the operator runs the install command - Deploy a Worker only with credentials this review did not use ### Cost model Apache-2.0; no Wrangler deploy was run 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [sandbox-migrate-to-next SKILL.md ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/skills/sandbox-migrate-to-next/SKILL.md) Checked 2026-10-14 https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/skills/sandbox-migrate-to-next/SKILL.md Supports: cutover consent, invented-API refusal, and secret red flag - [Repository README ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/README.md) Checked 2026-10-14 https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/README.md Supports: npx skills install line and sandbox-migrate-to-next table row - [Repository LICENSE ↗](https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/LICENSE) Checked 2026-10-14 https://github.com/cloudflare/skills/blob/53395984c3ea1925d00fce03b266112302f050e6/LICENSE Supports: Apache License Version 2.0 - [2026-10-15 W44 source re-review at the existing pin ↗](https://raw.githubusercontent.com/cloudflare/skills/53395984c3ea1925d00fce03b266112302f050e6/skills/sandbox-migrate-to-next/SKILL.md) Checked 2026-10-15 https://raw.githubusercontent.com/cloudflare/skills/53395984c3ea1925d00fce03b266112302f050e6/skills/sandbox-migrate-to-next/SKILL.md Supports: upstreamDescription, review.notTested, review.reviewedAt - [2026-10-15 W44 source re-review at the existing pin ↗](https://raw.githubusercontent.com/cloudflare/skills/53395984c3ea1925d00fce03b266112302f050e6/README.md) Checked 2026-10-15 https://raw.githubusercontent.com/cloudflare/skills/53395984c3ea1925d00fce03b266112302f050e6/README.md Supports: install.command KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Cloudflare cf CLI ↗ Pins Cloudflare's cf CLI skill, which tells an agent to search the local command index and to keep Wrangler when a Wrangler config is already present.](/skills/cloudflare-cf-cli/)[### Cloudflare Wrangler Workflow ↗ Runs Wrangler work in projects that already have a Wrangler configuration file, against the installed Wrangler version and an explicitly identified target.](/skills/cloudflare-wrangler/)[### AKS Automatic Readiness ↗ Pins Microsoft's AKS Automatic readiness skill, which assesses a cluster or local manifests without changing the cluster and writes files only after an accepted diff.](/skills/microsoft-azure-kubernetes-automatic-readiness/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Choose a toolkit](/tools/) - [Inspect execution hosts](/agents/) - [Check tool access](/mcp-servers/) - [Check project dependencies](/check-repo/)