スキル cloudflare-app-bootstrap
📦

cloudflare-app-bootstrap

コンテンツリビジョン r1 安全 ⚙️ 外部コマンド🌐 ネットワークアクセス

Bootstrap a Cloudflare Workers App Locally

Existing Cloudflare Workers apps can fail locally when bindings, secrets, or initial data are missing. This skill guides setup and verifies an application request using the project's existing tools.

対応: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 70 十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト
Review the Skillstore skill "cloudflare-app-bootstrap" from https://skillstore.io/skills/cloudflare-cloudflare-app-bootstrap.md and its manifest at https://skillstore.io/api/skills/cloudflare-cloudflare-app-bootstrap/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

テストする

「cloudflare-app-bootstrap」を使用しています。 Describe the expected setup report after verifying a local D1-backed route.

期待される結果:

  • Application root, package manager, and existing setup scripts identified.
  • Required D1 binding mapped to the local database and initialized through existing migrations.
  • Representative route response and intended database state change checked.
  • Tested URL, local resource targets, and reproducible setup steps recorded.

「cloudflare-app-bootstrap」を使用しています。 Describe the expected report when an external service credential is missing.

期待される結果:

  • Missing runtime secret identified by name without exposing a value.
  • Local secret file checked for Git exclusion and documented with a safe placeholder.
  • Credential-dependent behavior reported as unverified.
  • Remaining setup requirements listed without claiming the application is fully working.

セキュリティ監査

安全

All 16 static findings are false positives: Markdown code spans, official Cloudflare documentation links, and feedback examples do not establish malicious execution or reconnaissance. The instructions restrict remote changes, protect secrets, and require approval before publishing sanitized feedback. No evidence found of prompt injection, credential exfiltration, or unauthorized destructive intent.

2
スキャンされたファイル
90
解析済み行数
0
レビュー項目
0
誤検知を無視
最新の完了済み静的・セマンティック監査では、確認済みのセキュリティ検出事項は見つかりませんでした。これは、スキルに副作用がないことを証明するものではありません。
監査者: codex
このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く
セキュリティ評価

レポートリンクをコピー

https://skillstore.io/skills/cloudflare-cloudflare-app-bootstrap/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/cloudflare-cloudflare-app-bootstrap/security.svg)](https://skillstore.io/skills/cloudflare-cloudflare-app-bootstrap?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/cloudflare-cloudflare-app-bootstrap?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-cloudflare-app-bootstrap/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/cloudflare-cloudflare-app-bootstrap.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学術引用 (APA · BibTeX · CFF)

APA形式の引用

cloudflare. (2026). cloudflare-app-bootstrap security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-cloudflare-app-bootstrap/audits/1

BibTeX形式の引用

@techreport{cloudflare-cloudflare-cloudflare-app-bootstrap-2026, author = {cloudflare}, title = {cloudflare-app-bootstrap security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/cloudflare-cloudflare-app-bootstrap/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "cloudflare-app-bootstrap security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "cloudflare" date-released: "2026-11-07" url: "https://skillstore.io/skills/cloudflare-cloudflare-app-bootstrap/audits/1" identifiers: - type: other value: "skillstore:cloudflare-cloudflare-app-bootstrap:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由 証拠の信頼度: 中
41
アーキテクチャ
65
保守性
87
コンテンツ
65
コミュニティ
74
仕様準拠

作成できるもの

Onboard to an existing application

Connect required bindings and local configuration, then verify a representative request without replacing the existing project.

Initialize a data-backed local workflow

Apply the minimum local initialization needed for a feature and verify its database access using existing migration tooling.

Verify repeatable team setup

Check build and runtime configuration, distinguish local and remote resources, and document tested setup commands and unresolved requirements.

これらのプロンプトを試す

Start an existing app locally
Help me run this existing Cloudflare Workers app locally. Preserve its framework and package manager, identify missing configuration, and verify one meaningful request.
Connect bindings and secrets
Inspect this app's bindings and required values. Separate browser, build, and runtime configuration, protect secrets, and report anything missing before verification.
Initialize local application data
Prepare the minimum local D1 state needed for this feature using existing migrations. Do not modify remote data. Verify the intended response and state change.
Audit a monorepo bootstrap workflow
Identify the app root and configuration source in this monorepo. Map local and remote bindings, regenerate types, run checks, and document verified setup. Do not deploy.

ベストプラクティス

  • Preserve the existing lockfile, configuration source, migration tooling, and resource identifiers.
  • Confirm account, environment, and local or remote resource targets before creation, migrations, or test writes.
  • Verify an application request and intended state change, then document tested commands and unresolved requirements.

回避

  • Replacing a working application with a starter to fix configuration.
  • Putting private runtime credentials into public client configuration or committing local secret files.
  • Treating server startup as proof of working bindings or deploying when only local setup was requested.

よくある質問

Does this skill create a new application?
It focuses on existing applications. Missing Cloudflare configuration is delegated to frameworks-on-cloudflare or cf-cli.
Does local setup require a Cloudflare login?
Only workflows requiring account access need authentication. Login and deployment are not blanket prerequisites.
Can a local Worker access remote services?
Yes. The skill identifies simulated resources and real service calls before exercising writes.
How are D1 migrations targeted?
The instructions require explicit local or remote flags. Remote migrations are limited to database changes included in the requested setup.
How are secrets handled?
The skill separates browser, build, and runtime values. It protects local secret files, uses placeholders, and distinguishes local secrets from deployed secrets.
What counts as successful verification?
A representative route or UI action must produce the expected response and intended state change. Missing credentials and unverified behavior must be reported.

開発者情報

作成者

cloudflare

ライセンス

不明

Skillstore リビジョン

r1

バージョンに関する注意

作者はバージョンを宣言していません。

参照

c993c6abcbffafea2683d7748b53b3dfaf438415

メンテナンスの新しさ

2026/11/9

利用状況

0 ダウンロード · 0 閲覧

ファイル構成

cloudflare のその他のスキル

すべて表示
すべて表示