Skills wrangler
📦

wrangler

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access🔑 Env variables

Manage Cloudflare Workers with Wrangler

Cloudflare Workers projects require precise Wrangler commands and configuration choices. This skill gives Claude, Codex, and Claude Code focused guidance for deploys, bindings, secrets, and troubleshooting.

Supports: Claude Codex Code(CC)
📊 69 Adequate

This skill is part of a pack

Install the whole pack to get every skill the task needs, in one command.

Cloudflare Workers Deploy · 6 skills Install whole pack

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "wrangler" from https://skillstore.io/skills/cloudflare-wrangler.md and its manifest at https://skillstore.io/api/skills/cloudflare-wrangler/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/cloudflare-wrangler.md Signed manifest GET /api/skills/cloudflare-wrangler/manifest Signed lockfile GET /api/skills/cloudflare-wrangler/lockfile

Test it

Using "wrangler". I need to deploy my Worker to staging safely.

Expected outcome:

The response recommends checking Wrangler version, validating configuration, generating types, reviewing secrets, using a dry run, and deploying to the staging environment.

Using "wrangler". My Worker needs object storage and a database.

Expected outcome:

The response outlines R2 bucket and D1 database setup, binding names to add, local validation, and deployment checks.

Using "wrangler". My deployed Worker has missing binding errors.

Expected outcome:

The response checks binding names, environment-specific config, generated types, schema validation, and local versus remote binding behavior.

Security Audit

Medium Risk
v4 • 7/5/2026 Open versioned report

The static findings are false positives caused by Markdown backticks, placeholder secret names, localhost test URLs, and normal Wrangler command examples. No prompt injection, malware intent, credential exfiltration, or unauthorized environment access was found. The main residual concern is that destructive Cloudflare operations need stronger confirmation guidance.

1
Files scanned
888
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
SKILL.md:50SKILL.md:274-275SKILL.md:329-330SKILL.md:375-376SKILL.md:650-651SKILL.md:727-728
Destructive Cloudflare Operations Need Confirmation
The skill lists delete commands for Workers, KV namespaces, R2 buckets, D1 databases, workflows, and secret stores. It does not require confirming account, environment, resource name, or backup state first.
Multiple explicit delete commands are present in the reference text. They are legitimate Wrangler operations, but an AI agent could apply them to the wrong Cloudflare environment without stronger confirmation guidance.

Risk Factors

⚙️ External commands (130)
SKILL.md:12-14 SKILL.md:14-17 SKILL.md:17-19 SKILL.md:19-23 SKILL.md:23-24 SKILL.md:24-25 SKILL.md:25-26 SKILL.md:26-27 SKILL.md:27-28 SKILL.md:28 SKILL.md:32-38 SKILL.md:38-44 SKILL.md:44-45 SKILL.md:45-46 SKILL.md:46-47 SKILL.md:47-48 SKILL.md:48-49 SKILL.md:49-50 SKILL.md:50-51 SKILL.md:51-59 SKILL.md:59-66 SKILL.md:66-70 SKILL.md:70-131 SKILL.md:131-135 SKILL.md:135-144 SKILL.md:144-152 SKILL.md:152-174 SKILL.md:174-178 SKILL.md:178-180 SKILL.md:180-190 SKILL.md:190-196 SKILL.md:196-198 SKILL.md:198-201 SKILL.md:201-209 SKILL.md:209-224 SKILL.md:224-228 SKILL.md:228-243 SKILL.md:243-247 SKILL.md:247-259 SKILL.md:259-267 SKILL.md:267-276 SKILL.md:276-280 SKILL.md:280-298 SKILL.md:298-302 SKILL.md:302-308 SKILL.md:308-316 SKILL.md:316-331 SKILL.md:331-335 SKILL.md:335-344 SKILL.md:344-348 SKILL.md:348-354 SKILL.md:354-362 SKILL.md:362-377 SKILL.md:377-381 SKILL.md:381-390 SKILL.md:390-394 SKILL.md:394-406 SKILL.md:406-410 SKILL.md:410-416 SKILL.md:416-420 SKILL.md:420-431 SKILL.md:431-439 SKILL.md:439-454 SKILL.md:454-458 SKILL.md:458-464 SKILL.md:464-468 SKILL.md:468-474 SKILL.md:474-482 SKILL.md:482-498 SKILL.md:498-502 SKILL.md:502-509 SKILL.md:509-517 SKILL.md:517-523 SKILL.md:523-527 SKILL.md:527-531 SKILL.md:531-541 SKILL.md:541-556 SKILL.md:556-560 SKILL.md:560-575 SKILL.md:575-583 SKILL.md:583-592 SKILL.md:592-596 SKILL.md:596-605 SKILL.md:605-609 SKILL.md:609-615 SKILL.md:615-619 SKILL.md:619-629 SKILL.md:629-637 SKILL.md:637-652 SKILL.md:652-656 SKILL.md:656-665 SKILL.md:665-669 SKILL.md:669-679 SKILL.md:679-687 SKILL.md:687-702 SKILL.md:702-706 SKILL.md:706-712 SKILL.md:712-720 SKILL.md:720-729 SKILL.md:729-733 SKILL.md:733-745 SKILL.md:745-749 SKILL.md:749-759 SKILL.md:759-765 SKILL.md:765-777 SKILL.md:777-785 SKILL.md:785-800 SKILL.md:800-804 SKILL.md:804-811 SKILL.md:811-819 SKILL.md:819-821 SKILL.md:821-823 SKILL.md:823-824 SKILL.md:824-836 SKILL.md:836-840 SKILL.md:840-846 SKILL.md:846-856 SKILL.md:856 SKILL.md:857-858 SKILL.md:858-859 SKILL.md:859-860 SKILL.md:860-865 SKILL.md:865-874 SKILL.md:874-880 SKILL.md:880-882 SKILL.md:882-883 SKILL.md:883 SKILL.md:884-885 SKILL.md:885-886 SKILL.md:886-887
🌐 Network access (3)
SKILL.md:24 SKILL.md:173 SKILL.md:845
🔑 Env variables (6)
SKILL.md:625 SKILL.md:200 SKILL.md:199 SKILL.md:230 SKILL.md:233 SKILL.md:239
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/cloudflare-wrangler/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/cloudflare-wrangler/security.svg)](https://skillstore.io/skills/cloudflare-wrangler?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/cloudflare-wrangler?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-wrangler/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/cloudflare-wrangler.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

cloudflare. (2026). wrangler security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-wrangler/audits/4

BibTeX citation

@techreport{cloudflare-cloudflare-wrangler-2026, author = {cloudflare}, title = {wrangler security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/cloudflare-wrangler/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "wrangler security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "cloudflare" date-released: "2026-07-05" url: "https://skillstore.io/skills/cloudflare-wrangler/audits/4" identifiers: - type: other value: "skillstore:cloudflare-wrangler:audit:4" description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
Dicklesworthstone Recommended

dicklesworthstone-wrangler

Skillstore Score 71
Evidence Confidence High
Skillstore usage 11
Updated

2026-08-21

cloudflare Current

cloudflare-wrangler

Skillstore Score 69
Evidence Confidence High
Skillstore usage 13
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
71
Community
83
Spec Compliance

What You Can Build

Ship a Worker

Plan local development, configuration validation, type generation, dry runs, and deployment for a Cloudflare Worker.

Manage Cloudflare Resources

Find the right Wrangler commands for KV, R2, D1, Queues, Workflows, Vectorize, Workers AI, and related bindings.

Prepare Production Operations

Review environments, secrets, rollbacks, logs, migrations, and release checks before changing production Workers.

Try These Prompts

Check My Setup 
Use the wrangler skill to verify my Cloudflare Workers project setup. Review installation, config shape, compatibility date, and type generation steps.
Create Deployment Plan 
Use the wrangler skill to plan a safe deployment for my Worker. Include dry run, environment selection, secrets review, and rollback checks.
Add Resource Bindings 
Use the wrangler skill to add KV, R2, and D1 bindings to my project. Explain required config fields and validation steps.
Audit Production Workflow 
Use the wrangler skill to review a multi-environment Worker release process. Include remote bindings, migrations, observability, and destructive command safeguards.

Best Practices

  • Run validation, type generation, and dry runs before deployment.
  • Confirm account, environment, and resource names before destructive commands.
  • Keep secrets out of configuration files and version control.

Avoid

  • Running delete commands without confirming the target environment.
  • Committing local secret files or bulk secret files to source control.
  • Mixing staging and production bindings in one unreviewed configuration.

Frequently Asked Questions

What does this skill help with?
It provides focused Wrangler CLI guidance for Cloudflare Workers projects and related Cloudflare services.
Can it deploy my Worker automatically?
No. It provides command guidance, but tool execution depends on the host agent and user approval.
Does it cover wrangler.jsonc configuration?
Yes. It explains common configuration fields, bindings, environments, compatibility dates, and validation steps.
Does it support local development?
Yes. It covers local dev mode, local storage behavior, scheduled event testing, and remote binding options.
How should secrets be handled?
Use Wrangler secret workflows and local secret files carefully. Do not commit secret values to source control.
Who should review destructive commands?
A human operator should confirm the Cloudflare account, environment, resource name, and backup state before deletion.

Developer Details

Author

cloudflare

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/cloudflare/skills/tree/main/skills/wrangler/

Ref

02f077c174c5335e2f5d02ca15e77b70d9543e58

Maintenance freshness

7/18/2026

Usage

7 downloads · 263 views

File structure

📄 SKILL.md

More from cloudflare

View all

Related Skills

View all