技能 sandbox-stable

📦

sandbox-stable

Name: sandbox-stable
Author: cloudflare

內容修訂 r1 安全 ⚡ 包含腳本⚙️ 外部命令🌐 網路存取

Build Stable Cloudflare Sandbox Apps

Cloudflare Sandbox projects can fail when stable and preview packages, images, or APIs are mixed. This skill keeps implementation aligned with the stable release.

支援: Claude Codex Code(CC)

🥉 77 銅級

Maintain this Skill? Claim it 🥉 77 銅級

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "sandbox-stable" from https://skillstore.io/skills/cloudflare-sandbox-stable.md and its manifest at https://skillstore.io/api/skills/cloudflare-sandbox-stable/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/cloudflare-sandbox-stable.md 已簽名 manifest GET /api/skills/cloudflare-sandbox-stable/manifest 已簽名 lockfile GET /api/skills/cloudflare-sandbox-stable/lockfile

測試它

正在使用「sandbox-stable」。 Check whether this existing Sandbox project remains on the stable release.

預期結果:

Package line: stable default release.
Container image: matching stable image.
Result: compatible stable configuration.

正在使用「sandbox-stable」。 Choose an API for a long-running command that streams logs.

預期結果:

Use the stable streaming or background process APIs. Confirm the exact method signature from installed types before implementation.

正在使用「sandbox-stable」。 Review a stable project before production deployment.

預期結果:

Keep credentials in the Worker.
Prefer RPC for tunnels and large streams.
Configure wildcard DNS for production preview hostnames.

安全審計

安全

v1 • 2026/8/9 開啟版本化報告

All 60 static alerts are false positives caused by Markdown formatting, SDK method names, documentation links, and a DNS requirement. The skill contains guidance and examples, with no prompt injection, host execution, data exfiltration, or reconnaissance behavior.

已掃描檔案

111

分析行數

複核項目

已忽略的誤報

風險因素

⚡ 包含腳本 (2)

SKILL.md:37 SKILL.md:56

⚙️ 外部命令 (24)

🌐 網路存取 (33)

最近一次完成的靜態與語意稽核未偵測到已確認的安全發現。這並不能證明該 Skill 沒有副作用。

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/cloudflare-sandbox-stable/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/cloudflare-sandbox-stable/security.svg)](https://skillstore.io/skills/cloudflare-sandbox-stable?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/cloudflare-sandbox-stable?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-sandbox-stable/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/cloudflare-sandbox-stable.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

cloudflare. (2026). sandbox-stable security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-sandbox-stable/audits/1

BibTeX 引用

@techreport{cloudflare-cloudflare-sandbox-stable-2026,
  author = {cloudflare},
  title = {sandbox-stable security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/cloudflare-sandbox-stable/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "sandbox-stable security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "cloudflare"
date-released: "2026-08-09"
url: "https://skillstore.io/skills/cloudflare-sandbox-stable/audits/1"
identifiers:
  - type: other
    value: "skillstore:cloudflare-sandbox-stable:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Maintain an Existing Sandbox App

Update stable Sandbox features while preserving package and container compatibility.

Review Production Readiness

Check stable release alignment, secrets handling, network transport, and preview hostname requirements.

Remove Deprecated Stable APIs

Find deprecated transports and helpers without starting a preview release migration.

試試這些提示

Check Stable Alignment

Inspect this Cloudflare Sandbox project. Confirm whether its package and container image use the stable release, then list any mismatch.

Add a Stable Command Workflow

Add a stable Sandbox command workflow for this task. Use the installed types and explain whether execution, streaming, or a session fits best.

Prepare a Stable Production Release

Review this stable Sandbox application for production. Check secrets, RPC transport, wildcard DNS, lifecycle handling, and package-image alignment.

Audit Deprecated Stable APIs

Audit this repository for deprecated stable Sandbox APIs. Propose replacements, preserve stable behavior, and exclude all preview-only APIs.

最佳實務

Verify the installed package and container image before writing code.
Use installed stable types and current Cloudflare documentation for exact signatures.
Keep live credentials in the Worker and use outbound handlers for external API calls.

避免

Do not mix a stable package with a preview container image.
Do not apply preview process handles or terminal APIs to a stable dependency.
Do not place live credentials in the sandbox environment.

常見問題

Does this skill support the preview package?

No. Use the dedicated preview skill for projects using the preview package or image.

Can it migrate a stable application to 1.0?

No. Use the migration skill when the user explicitly requests a 1.0 preview migration.

Which command API should I use?

Use direct execution for short buffered commands. Use stable streaming or background APIs for long-running work.

Can sessions preserve shell state?

Yes. Stable sessions can preserve the working directory and environment across commands.

Where should credentials be stored?

Keep live credentials in the Worker. Pass controlled access through outbound handlers when sandbox processes call external services.

How should deprecated APIs be handled?

Update the stable package and matching image first. Then follow the deprecation guide without introducing preview-only APIs.

開發者詳細資訊

作者

cloudflare

授權

MIT

Skillstore 修訂

版本提示

作者未聲明版本。

儲存庫

https://github.com/cloudflare/skills/tree/f96bff754e428838818017f75817f0f9428acd48/skills/sandbox-stable

引用

1754bbf03bca9aaa738b9ba6ee7ad551d8d5a825

維護新鮮度

2026/8/10

使用量

0 次下載 · 0 次瀏覽

檔案結構

📄 SKILL.md

cloudflare 的更多技能

查看全部

📦

cloudflare-one-migrations

Plan Cloudflare One Migrations

Legacy security policies often lack direct Cloudflare One equivalents. This skill builds an accountable migration map, staged rollout, validation plan, and rollback path.

安全與法遵查看

📦

k2

Build Cloudflare K2 Streams With Current Documentation

Cloudflare K2 setup and troubleshooting require current API details, configuration rules, and delivery semantics. This skill directs your assistant to relevant documentation before providing guidance.

程式開發查看

📦

workers-profiling

Profile Cloudflare Workers CPU and Memory

CPU hotspots and memory allocation pressure can make deployed Workers and Durable Objects difficult to diagnose. This skill guides profiling, evidence analysis, and targeted optimization.

DevOps 與基礎設施查看

📦

sandbox-migrate-to-next

Migrate Cloudflare Sandbox Apps to SDK 1.0

Stable Sandbox applications require coordinated API, image, and deployment changes for SDK 1.0. This skill performs the migration and validates the result.

程式開發查看

📦

cloudflare-one

Design and Troubleshoot Cloudflare One

Cloudflare One deployments span identity, traffic, devices, private networks, and data controls. This skill structures design, configuration, troubleshooting, validation, and staged rollout decisions.

安全與法遵查看

📦

cf-cli

Manage Cloudflare Resources with the cf CLI

Cloudflare command discovery and mixed Wrangler projects can make terminal workflows difficult to verify. This skill guides command lookup, request previews, authentication, and project-aware execution.

DevOps 與基礎設施查看

查看全部

📦

playwright-testing

提升 Playwright 測試覆蓋率

由 C0ntr0lledCha0s

當設定、定位器和 fixtures 不一致時，Playwright 測試套件可能會變得不穩定。此技能提供可靠瀏覽器測試、除錯和可重用 page objects 的實用模式。

程式開發查看

📦

nestjs-code-audit

Audit NestJS Code with Evidence-Backed Findings

由 amirtaherkhani

NestJS repositories can hide boundary flaws and runtime risks that lint results alone cannot reveal. This skill combines local evidence collection and semantic review into one prioritized report.

程式開發查看

📦

starknet-js

使用 starknet.js 建置 Starknet 應用程式

由 internet-court

Starknet 整合需要精確處理提供者、帳戶、交易與費用。此技能為 Claude、Codex 與 Claude Code 提供實用的 starknet.js v9 模式。

程式開發查看

📦

vue-best-practices

改善 Vue 3 程式碼品質

由 vuejs-ai

Vue 專案常會隨時間累積響應性、元件和效能方面的錯誤。此技能提供針對性的 Vue 3 指引，協助採用更安全的模式並寫出更清晰的程式碼。

程式開發查看

📦

react-dev

建構型別安全的 React 元件

由 softaworks

React TypeScript 工作經常需要精確的事件、hook 與路由型別。此 skill 提供型別化元件、React 19 APIs 與路由的聚焦模式。

程式開發查看

📦

vue-options-api-best-practices

改善 Vue Options API 元件

由 vuejs-ai

Vue Options API 專案可能會失去型別安全性與正確的 this 綁定。此技能提供更安全 Vue 元件的直接模式。

程式開發查看

sandbox-stable

使用我的智慧代理安裝

Agent 可讀資源

測試它

安全審計

風險因素

複製報告連結

Markdown 徽章

HTML 徽章

嵌入卡片

APA 引用

BibTeX 引用

CITATION.cff

Skillstore 評分

你可以打造什麼

Maintain an Existing Sandbox App

Review Production Readiness

Remove Deprecated Stable APIs

試試這些提示

最佳實務

避免

常見問題

開發者詳細資訊

cloudflare 的更多技能

cloudflare-one-migrations

k2

workers-profiling

sandbox-migrate-to-next

cloudflare-one

cf-cli

相關技能

playwright-testing

nestjs-code-audit

starknet-js

vue-best-practices

react-dev

vue-options-api-best-practices