المهارات workers-best-practices
📦

workers-best-practices

مراجعة المحتوى r1 مخاطر متوسطة ⚙️ الأوامر الخارجية📁 الوصول إلى نظام الملفات🌐 الوصول إلى الشبكة🔑 متغيرات البيئة

Review Cloudflare Workers with proven practices

Cloudflare Workers projects can fail through outdated APIs, incorrect bindings, and unsafe runtime patterns. This skill guides code reviews and implementation using current documentation and focused production checks.

يدعم: Claude Codex Code(CC)
📊 66 كافٍ

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل
Review the Skillstore skill "workers-best-practices" from https://skillstore.io/skills/cloudflare-workers-best-practices.md and its manifest at https://skillstore.io/api/skills/cloudflare-workers-best-practices/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/cloudflare-workers-best-practices.md manifest موقَّع GET /api/skills/cloudflare-workers-best-practices/manifest lockfile موقَّع GET /api/skills/cloudflare-workers-best-practices/lockfile

اختبرها

جارٍ استخدام "workers-best-practices". Review a handler that stores the current user in a module variable.

النتيجة المتوقعة:

  • High: request-scoped data is stored in module state and can leak between reused isolates.
  • Use function parameters or local variables for request-specific values.

جارٍ استخدام "workers-best-practices". Review a configuration that stores an API key in vars.

النتيجة المتوقعة:

  • High: the configuration contains a secret that can enter version control.
  • Store the value with Wrangler secrets and keep only non-secret settings in vars.

جارٍ استخدام "workers-best-practices". Review a large upstream response that uses response.text().

النتيجة المتوقعة:

  • Medium: buffering an unbounded response can exceed the Workers memory limit.
  • Return the response body as a stream or process it incrementally.

التدقيق الأمني

مخاطر متوسطة
v1 • ٢٠‏/٧‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

The 92 static findings are false positives caused by Markdown code spans, illustrative Worker code, safe secret-handling guidance, and public documentation URLs. No prompt injection, credential exfiltration, or hidden execution behavior was found. The skill does instruct users to retrieve and extract an unpinned package, which warrants controlled execution.

3
الملفات التي تم فحصها
767
الأسطر التي تم تحليلها
0
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (1)

متوسط
SKILL.md:21-29references/review.md:11-18
Unpinned package retrieval and archive extraction
The skill directs the assistant to download the latest published @cloudflare/workers-types package and extract it into a shared temporary path. This creates a supply-chain and local temporary-directory exposure unless users review the package source and isolate the workspace.
Both files explicitly require retrieving the latest package and extracting its archive into /tmp. The exposure is real, although the named package is legitimate and no malicious intent is present.

عوامل الخطر

⚙️ الأوامر الخارجية (36)
references/review.md:170-171 references/review.md:171-172 references/rules.md:188-190 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:17 SKILL.md:21 SKILL.md:23-29 SKILL.md:29-33 SKILL.md:33-34 SKILL.md:34-42 SKILL.md:42-43 SKILL.md:43-44 SKILL.md:44 SKILL.md:45-52 SKILL.md:52-53 SKILL.md:53 SKILL.md:68 SKILL.md:75 SKILL.md:81 SKILL.md:88-90 SKILL.md:90-91 SKILL.md:91 SKILL.md:94-95 SKILL.md:95-96 SKILL.md:96-97 SKILL.md:97 SKILL.md:98 SKILL.md:99-100 SKILL.md:100 SKILL.md:101 SKILL.md:107 SKILL.md:111 SKILL.md:112-118 SKILL.md:118-120
📁 الوصول إلى نظام الملفات (9)
references/review.md:14 references/review.md:15 references/review.md:16 references/review.md:17 references/rules.md:187 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:28
🌐 الوصول إلى الشبكة (29)
references/rules.md:48 references/rules.md:105 references/rules.md:106 references/rules.md:113 references/rules.md:120 references/rules.md:137 references/rules.md:151 references/rules.md:186 references/rules.md:203 references/rules.md:254 references/rules.md:312 references/rules.md:326 references/rules.md:349 references/rules.md:352 references/rules.md:358 references/rules.md:421 references/rules.md:306 references/rules.md:72 references/rules.md:106 references/rules.md:114 references/rules.md:137 references/rules.md:187 references/rules.md:349 references/rules.md:352 references/rules.md:358 SKILL.md:91 SKILL.md:14 SKILL.md:17 SKILL.md:119
🔑 متغيرات البيئة (2)
references/rules.md:74 references/rules.md:82
دقّقه: claude
شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار
تقييم الأمان

نسخ رابط التقرير

https://skillstore.io/skills/cloudflare-workers-best-practices/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/cloudflare-workers-best-practices/security.svg)](https://skillstore.io/skills/cloudflare-workers-best-practices?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/cloudflare-workers-best-practices?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-workers-best-practices/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/cloudflare-workers-best-practices.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

cloudflare. (2026). workers-best-practices security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-workers-best-practices/audits/1

اقتباس BibTeX

@techreport{cloudflare-cloudflare-workers-best-practices-2026, author = {cloudflare}, title = {workers-best-practices security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/cloudflare-workers-best-practices/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "workers-best-practices security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "cloudflare" date-released: "2026-07-20" url: "https://skillstore.io/skills/cloudflare-workers-best-practices/audits/1" identifiers: - type: other value: "skillstore:cloudflare-workers-best-practices:audit:1" description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط
41
الهندسة المعمارية
85
قابلية الصيانة
87
المحتوى
65
المجتمع
83
الامتثال للمواصفات

ما الذي يمكنك بناؤه

Review a Worker before release

Identify configuration, type, security, and runtime issues before a production deployment.

Set up a new Worker project

Create a configuration and handler structure that follows current Workers patterns.

Standardize team reviews

Apply a repeatable checklist for bindings, streaming, observability, and error handling.

جرّب هذه الموجّهات

Beginner: review one handler 
Review this Cloudflare Worker handler for the most important production issues. Explain each issue and show the corrected approach.
Intermediate: check configuration 
Review this wrangler.jsonc and Worker code together. Check binding names, secrets, compatibility settings, and observability.
Advanced: assess performance 
Analyze this Worker for buffering, floating promises, global request state, and unnecessary network calls. Prioritize fixes by production impact.
Expert: complete release review 
Perform a release review of these Worker files. Retrieve current Workers guidance first, then report verified findings with severity, evidence, and remediation.

أفضل الممارسات

  • Retrieve current Workers documentation and type definitions before making API-specific recommendations.
  • Provide file and line evidence for each finding and distinguish verified issues from suggestions.
  • Review configuration and source code together so binding names and secret handling stay consistent.

تجنب

  • Do not treat bundled examples as a substitute for the project's current Workers types and configuration.
  • Do not hardcode secrets or recommend storing credentials in Wrangler vars.
  • Do not buffer unbounded request or response bodies when streaming is appropriate.

الأسئلة المتكررة

What does this skill review?
It reviews Cloudflare Workers code and Wrangler configuration for production practices, type safety, performance, and security.
Does it use current Cloudflare guidance?
It instructs the assistant to retrieve current Cloudflare documentation and Workers type definitions before API-specific advice.
Can it deploy my Worker?
No. It provides guidance and review findings. Deployment requires separate tools and authorization.
Can it find secrets?
It checks for common hardcoded secret patterns and recommends Wrangler secret storage. It cannot guarantee that all credentials are detected.
Does it support Durable Objects and Workflows?
It covers shared binding and class patterns, then directs specialized topics to the relevant documentation or skill.
Should I run its package retrieval commands automatically?
No. Review the package name and network policy first. Use trusted registries and a controlled temporary directory.

تفاصيل المطور

المؤلف

cloudflare

الترخيص

MIT

مراجعة Skillstore

r1

تنبيه الإصدار

لم يعلن المؤلف عن إصدار.

المستودع

https://github.com/cloudflare/skills/tree/70215303d44a81a0db3219428f4825b604fc6061/skills/workers-best-practices

مرجع

c51565f83183133fcf8a8a7274ad0df2423655c8

حداثة الصيانة

٢٠‏/٧‏/٢٠٢٦

الاستخدام

0 تنزيلات · 0 مشاهدات

بنية الملفات

📁 references/

📄 review.md

📄 rules.md

📄 SKILL.md

المزيد من cloudflare

عرض الكل

مهارات ذات صلة

عرض الكل
📦

playwright-testing

86

تحسين تغطية اختبارات Playwright

بواسطة C0ntr0lledCha0s

يمكن أن تصبح مجموعات اختبارات Playwright غير مستقرة عندما تكون الإعدادات والمحددات وfixtures غير متسقة. تمنحك هذه المهارة أنماطًا عملية لاختبارات متصفح موثوقة، وتصحيح الأخطاء، وكائنات صفحات قابلة لإعادة الاستخدام.

البرمجة والتطوير عرض