cloudflare-one
Design and Troubleshoot Cloudflare One
Cloudflare One deployments span identity, traffic, devices, private networks, and data controls. This skill structures design, configuration, troubleshooting, validation, and staged rollout decisions.
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
Review the Skillstore skill "cloudflare-one" from https://skillstore.io/skills/cloudflare-cloudflare-one.md and its manifest at https://skillstore.io/api/skills/cloudflare-cloudflare-one/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“cloudflare-one”。 Design private application access for managed employees and unmanaged contractors.
预期结果:
Use device-client private routing for managed employees and clientless access where supported for contractors. Define separate policies, pilot groups, tests, and rollback.
正在使用“cloudflare-one”。 Why does a healthy tunnel not reach my private application?
预期结果:
Tunnel health confirms connector reachability only. Verify published routes, split tunnel alignment, private DNS resolution, origin reachability, Access policy, and relevant logs.
正在使用“cloudflare-one”。 Prepare a safe TLS inspection rollout.
预期结果:
Deploy the trusted root certificate, inventory pinned applications, create inspection exceptions, enable a limited pilot, monitor failures, then expand through approval gates.
安全审计
安全All 50 static findings are false positives caused by Markdown links, inline code formatting, section language, or descriptions of legitimate Cloudflare security features. The skill contains no executable commands, malicious network destinations, reconnaissance behavior, keylogging implementation, or prompt injection.
风险因素
⚙️ 外部命令 (8)
🌐 网络访问 (29)
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/cloudflare-cloudflare-one/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/cloudflare-cloudflare-one?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/cloudflare-cloudflare-one?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-cloudflare-one/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/cloudflare-cloudflare-one.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
cloudflare. (2026). cloudflare-one security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-cloudflare-one/audits/1BibTeX 引用
@techreport{cloudflare-cloudflare-cloudflare-one-2026,
author = {cloudflare},
title = {cloudflare-one security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/cloudflare-cloudflare-one/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cloudflare-one security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "cloudflare"
date-released: "2026-09-25"
url: "https://skillstore.io/skills/cloudflare-cloudflare-one/audits/1"
identifiers:
- type: other
value: "skillstore:cloudflare-cloudflare-one:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中你能构建什么
Plan a Zero Trust rollout
Create a phased Cloudflare One architecture with prerequisites, pilot scope, validation, and rollback.
Configure private application access
Map Access policies, device enrollment, routes, DNS resolution, and tunnel redundancy for private applications.
Diagnose policy failures
Trace Access, Gateway, DNS, device client, or tunnel failures from logs toward the responsible configuration.
试试这些提示
Review my Cloudflare One deployment for [users, sites, and applications]. Identify missing context, major risks, and next validation steps.
Design private access for [applications] from [devices and sites]. Include identity, enrollment, tunnels, routes, DNS, pilot scope, tests, and rollback.
Troubleshoot [traffic failure]. Use these logs and settings: [evidence]. Map the traffic path, likely failure point, next test, and corrective action.
Create a staged Access, Gateway, TLS, and DLP design for [requirements]. Compare policy interactions, exceptions, monitoring, tests, and rollback gates.
最佳实践
- Retrieve current documentation before using exact limits, identifiers, API fields, or interface paths.
- Inspect existing resources and dependencies before proposing account changes.
- Stage risky policies disabled or within a pilot, then validate expected and denied flows before expansion.
避免
- Do not invent application identifiers, category identifiers, policy fields, or request bodies.
- Do not enable broad production inspection or blocking without explicit approval and tested rollback.
- Do not treat tunnel health, routes, DNS, enrollment, and authorization as interchangeable signals.
常见问题
Can this skill make Cloudflare account changes?
Does it support Access and Gateway?
Can it design private network access?
Does it cover DLP and TLS inspection?
Can it migrate from another security vendor?
How does it keep guidance current?
开发者详情
作者
cloudflare许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
2aa351cb09c29b7287d263bd8ea81e9bee3b2a61
维护新鲜度
2026/9/30
使用量
0 次下载 · 0 次浏览
文件结构
📄 SKILL.md