Waxell

skill

cloudflare-deploy High risk

davila7davila7/claude-code-templatesupdated

Browse GitHub Download zipBook a demo
Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare.
davila7's own description, from the skill's files.
EngineeringDocumentsProductivityskill
Stars
33,101
Version
v1
Copies
0
OverviewSecurity26Versions1

Overview

blockHigh risk

Waxell rates it high risk: 26 findings, highest severity critical.

Highest severity
critical
Findings
26
What ran
Static analysis

A clean result means nothing alarming in what is published, not a guarantee. How the checks work

We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.

Security

Security scan

Checked 2 days ago

Result

High risk Waxell rates it high risk: 26 findings, highest severity critical.

Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work

Findings (26)

critical · 1

  • critical

    Tells Claude to download a script and pipe it to a shell

    references/sandbox/patterns.md:40 · skill_risk:S1

high · 24

  • high

    Tells Claude to install unpinned packages (ai-gateway-provider, ai, @ai-sdk/openai, @ai-sdk/anthropic)

    references/ai-gateway/README.md:59 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (wrangler)

    references/bindings/api.md:101 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (@cloudflare/workers-types)

    references/bindings/api.md:173 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (@cloudflare/workers-types)

    references/bindings/gotchas.md:98 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (@cloudflare/puppeteer)

    references/browser-rendering/configuration.md:6 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (cloudflare)

    references/cache-reserve/configuration.md:36 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (cloudflare)

    references/cache-reserve/configuration.md:62 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (wrangler@latest)

    references/cron-triggers/gotchas.md:66 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (@cloudflare/workers-types)

    references/email-routing/configuration.md:109 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (postal-mime)

    references/email-routing/configuration.md:139 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (postal-mime, mimetext)

    references/email-workers/configuration.md:40 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (@cloudflare/workers-types, wrangler, typescript)

    references/email-workers/configuration.md:41 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (miniflare)

    references/miniflare/README.md:59 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (@cloudflare/vitest-pool-workers)

    references/miniflare/patterns.md:45 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (pyiceberg)

    references/r2-data-catalog/gotchas.md:148 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (partytracks, @cloudflare/calls)

    references/realtime-sfu/api.md:21 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (partytracks, @cloudflare/calls)

    references/realtime-sfu/configuration.md:17 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (partytracks, @cloudflare/calls, observable-hooks)

    references/realtime-sfu/configuration.md:22 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (@cloudflare/realtimekit, @cloudflare/realtimekit-react-ui)

    references/realtimekit/configuration.md:9 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (@cloudflare/realtimekit, @cloudflare/realtimekit-angular-ui)

    references/realtimekit/configuration.md:14 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (@cloudflare/realtimekit, @cloudflare/realtimekit-ui)

    references/realtimekit/configuration.md:19 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (pandas, numpy, matplotlib)

    references/sandbox/README.md:63 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (pandas, numpy)

    references/sandbox/configuration.md:36 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (typescript, ts-node)

    references/sandbox/configuration.md:51 · skill_risk:S2

info · 1

  • info

    assets/cloudflare.png: PNG image

    assets/cloudflare.png · binary_risk:B6

Versions

Version history

Each distinct content we have seen, newest first, with the verdict it got at the time.

One version so far: v1, seen 2026-11-03.

See and control which skills your people use

Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.

Book a demo

30 minutes. No commitment.

SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF

More engineering skills and plugins

See all