Skills cloudflare-one-migrations

📦

cloudflare-one-migrations

Name: cloudflare-one-migrations
Author: cloudflare

Content revision r1 Safe ⚙️ External commands🌐 Network access

Plan Cloudflare One Migrations

Legacy security policies often lack direct Cloudflare One equivalents. This skill builds an accountable migration map, staged rollout, validation plan, and rollback path.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "cloudflare-one-migrations" from https://skillstore.io/skills/cloudflare-cloudflare-one-migrations.md and its manifest at https://skillstore.io/api/skills/cloudflare-cloudflare-one-migrations/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/cloudflare-cloudflare-one-migrations.md Signed manifest GET /api/skills/cloudflare-cloudflare-one-migrations/manifest Signed lockfile GET /api/skills/cloudflare-cloudflare-one-migrations/lockfile

Test it

Using "cloudflare-one-migrations". Assess a ZIA migration with incomplete URL category and identity exports.

Expected outcome:

The assessment identifies missing category objects and SCIM data as blockers. It recommends completing exports before generating Gateway policies.

Using "cloudflare-one-migrations". Map a ZPA application segment with domains, CIDRs, connector groups, and bypass rules.

Expected outcome:

The plan separates Access applications, tunnel routes, private DNS, reusable policies, and manual split-tunnel exclusions. It records egress and hostname-limit decisions.

Using "cloudflare-one-migrations". Create a pilot plan for two offices and a contractor group.

Expected outcome:

The rollout starts with identity and connectivity dependencies, then audit-mode policies. Validation compares logs, tests access, and preserves an explicit rollback path.

Security Audit

Safe

v7 • 8/31/2026 Open versioned report

All 21 static findings are false positives caused by Markdown formatting, official Cloudflare documentation links, and migration-planning prose. The skill contains no executable scripts, command invocation, hostile network behavior, prompt injection, or malicious reconnaissance intent.

Files scanned

111

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (5)

SKILL.md:62 SKILL.md:67 SKILL.md:75 SKILL.md:89 SKILL.md:97-110

🌐 Network access (12)

SKILL.md:16 SKILL.md:28 SKILL.md:29 SKILL.md:31 SKILL.md:39 SKILL.md:40 SKILL.md:48 SKILL.md:53 SKILL.md:62 SKILL.md:65 SKILL.md:66 SKILL.md:76

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/cloudflare-cloudflare-one-migrations/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/cloudflare-cloudflare-one-migrations/security.svg)](https://skillstore.io/skills/cloudflare-cloudflare-one-migrations?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/cloudflare-cloudflare-one-migrations?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-cloudflare-one-migrations/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/cloudflare-cloudflare-one-migrations.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

cloudflare. (2026). cloudflare-one-migrations security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-cloudflare-one-migrations/audits/7

BibTeX citation

@techreport{cloudflare-cloudflare-cloudflare-one-migrations-2026,
  author = {cloudflare},
  title = {cloudflare-one-migrations security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/cloudflare-cloudflare-one-migrations/audits/7},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cloudflare-one-migrations security audit report (audit version 7)"
version: "unspecified"
type: report
authors:
  - name: "cloudflare"
date-released: "2026-08-31"
url: "https://skillstore.io/skills/cloudflare-cloudflare-one-migrations/audits/7"
identifiers:
  - type: other
    value: "skillstore:cloudflare-cloudflare-one-migrations:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Assess a Zscaler migration

Inventory ZIA and ZPA exports, map dependencies, and identify gaps before implementation.

Translate Palo Alto policies

Map rules, objects, zones, App-ID behavior, decryption, and GlobalProtect requirements into a reviewed migration plan.

Govern a phased rollout

Define pilots, validation gates, rollback ownership, source-rule accounting, and decommission criteria.

Try These Prompts

Start a migration assessment

Assess our migration from [source stack] to Cloudflare One. List the exports, logs, identities, applications, policies, and connectivity details you need first.

Build a policy mapping

Using these [source exports], create a mapping table for Cloudflare One. Mark prerequisites, confidence, unsupported behavior, partial mappings, and manual decisions.

Design a pilot rollout

Design a staged Cloudflare One pilot for [groups or sites]. Include dependency order, audit-mode defaults, validation gates, log comparisons, rollback steps, and owners.

Audit migration completeness

Review this [migration plan] against the source exports. Account for every rule and dependency. Flag count mismatches, broad access, identity gaps, DNS conflicts, and unresolved exceptions.

Best Practices

Provide structured source exports, object files, logs, and hit counts before requesting exact mappings.
Create dependencies first, then stage disabled or audit-mode rules for small pilot groups.
Review every partial, unsupported, unmapped, and manual item before enabling policies.

Avoid

Do not flatten zones, application identities, or vendor-specific behavior into generic lists.
Do not create broad allow-all rules to hide migration gaps.
Do not decommission source controls before pilot validation and rollback testing succeed.

Frequently Asked Questions

Which source platforms does this skill cover?

It covers Zscaler ZIA and ZPA, Palo Alto platforms, legacy VPN, SWG, SD-WAN, and other SASE stacks.

Does it deploy Cloudflare One configuration?

No. It produces assessments, mappings, rollout plans, and validation guidance.

What inputs produce the best results?

Provide structured exports, policy objects, identities, connector data, logs, hit counts, and current architecture details.

Can every source rule map directly?

No. Vendor-specific behavior may be partial, unsupported, or dependent on customer architecture decisions.

How does it reduce migration risk?

It uses dependency ordering, audit-mode defaults, small pilots, count checks, log comparison, and explicit rollback steps.

Does it replace security review?

No. Engineers must validate identity, DNS, routes, TLS inspection, DLP, application access, logging, and rollback behavior.

Developer Details

Author

cloudflare

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/cloudflare/skills/tree/f96bff754e428838818017f75817f0f9428acd48/skills/cloudflare-one-migrations

Ref

0acc95b40c367e2016e824a72b27b83b507ef020

Maintenance freshness

9/8/2026

Usage

0 downloads · 0 views

File structure

📄 SKILL.md