Unified Cloudflare skill for AI agents. Covers Workers (Hono), R2, D1, KV, DNS, SSL/TLS, caching, WAF, Zero Trust, Terraform IaC, and wrangler deployment. Built from production infrastructure work.
| Topic | What it covers |
|---|---|
| Method Decision Tree | When to use Workers vs R2 vs D1 vs KV vs Zero Trust vs Terraform |
| Workers + Hono | Project setup, wrangler.jsonc, auth middleware, Zero Trust header pattern |
| D1 Database | SELECT one/many, batch (atomic), migrations, wrangler commands, limits |
| R2 Storage | Presigned URLs (SigV4 via aws4fetch), multipart upload |
| KV Namespace | Get, put (with TTL), delete, list — eventual consistency caveats |
| DNS | Proxied vs DNS-only, SSL/TLS modes, Page Rules replacements |
| Zero Trust (Terraform) | Access applications, webhook bypass pattern, policy decisions, for_each |
| Terraform Provider | Setup, import existing resources, v4→v5 migration status |
| Wrangler Commands | dev, deploy, secrets, D1 execute, tail logs |
| Gotchas | 21 hard-won lessons across Workers, D1, R2, DNS, and Terraform |
git clone https://github.com/D1DX/cloudflare-skill.git
cp -r cloudflare-skill ~/.claude/skills/cloudflareOr as a git submodule:
git submodule add https://github.com/D1DX/cloudflare-skill.git path/to/skills/cloudflareCopy SKILL.md into your agent's prompt or knowledge directory. The skill is structured markdown — works with any LLM agent that reads reference files.
cloudflare-skill/
└── SKILL.md — Main skill (Workers, R2, D1, KV, DNS, Zero Trust, Terraform, gotchas)
- Workers, D1, R2, KV: Verified against Cloudflare Workers documentation and production deployments.
- Zero Trust & Terraform: Verified against Cloudflare Terraform provider docs and live Terraform configurations (v4.40+).
- v5 migration status: Verified from Cloudflare provider changelog.
Built by Daniel Rudaev at D1DX.
MIT License — Copyright (c) 2026 Daniel Rudaev @ D1DX