Description
Cloudflare One is an agent skill for designing, configuring, troubleshooting and reviewing Cloudflare One Zero Trust and SASE deployments. It covers Access, Gateway, the WARP device client, Tunnel and Mesh, Cloudflare WAN, DLP, CASB, device posture and identity. The skill starts by classifying your request as architecture, configuration, troubleshooting, migration or review, then gathers the context that matters: account ID, users, sites and apps, identity provider, group sync, device management, traffic path, compliance constraints and how far a change could reach. It asks for current documentation for the products involved rather than relying on memory, because limits, settings and API fields change. If account access is available, it inspects existing Access apps and policies, Gateway rules and lists, device profiles, tunnels and routes, DNS and resolver settings, and locations. It then proposes a change set with prerequisites, validation steps and a rollback plan. For risky changes it stages them as disabled, or scoped to a pilot group or site, unless you explicitly ask otherwise. The skill points to a separate cloudflare-one-migrations skill for planning moves from other vendors. It is published by Cloudflare on skills.sh under the cloudflare skills repository, which has about 3.1K stars. The skills.sh listing shows Gen Agent Trust Hub: Pass, Socket: Pass and Snyk: Pass.…
Highlights
- Covers Access, Gateway, WARP, Tunnel and WAN
- Classifies the request before acting
- Inspects existing resources before changing them
- Proposes change sets with rollback
- Stages risky changes to a pilot
Ratings & Reviews
No ratings yet
Be the first to rate cloudflare-one.
People also visit
homelab-vlan-segmentation
Segmenting home networks into VLANs for IoT, guest, trusted
mtls-configuration
Configure mutual TLS (mTLS) for zero-trust service-to-service communication
threat-model-analyst
Full STRIDE-A threat model analysis and incremental update skill
cloudflare-one FAQ
What does the skill do?
It helps design, configure, troubleshoot or review a Cloudflare One Zero Trust and SASE deployment.
Does it change my account?
It can inspect existing resources when account access is available. It proposes changes with validation and rollback, and stages risky ones to a pilot unless you ask otherwise.
Does it rely on memory for product details?
No. It retrieves current Cloudflare One documentation or the API schema before citing limits, settings or field names.
What about migrations?
Migration planning from other vendors is handled by the separate cloudflare-one-migrations skill.
How do I install it?
Run npx skills add https://github.com/cloudflare/skills --skill cloudflare-one.
What security audits has it passed?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best cloudflare-one alternatives?
Popular alternatives to cloudflare-one include cloudflare-one-migrations, turnstile-spin and homelab-vlan-segmentation. See all cloudflare-one alternatives