#205 by GitHub stars

tech-leads-club/agent-skills

The secure, validated skill registry for professional AI coding agents. Extend Antigravity, Claude Code, Cursor, Copilot and more with absolute confidence.

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/component-identification-sizing/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/coupling-analysis/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/decomposition-planning-roadmap/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/domain-analysis/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/domain-identification-grouping/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/evolutionary-modular-architecture/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/frontend-blueprint/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/legacy-migration-planner/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/modular-decomposition/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/modular-design-principles/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/react-composition-patterns/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(architecture)/tactical-ddd/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(cloud)/aws-advisor/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(cloud)/netlify-deploy/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(cloud)/render-deploy/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(cloud)/vercel-deploy/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(creation)/create-adr/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(creation)/create-rfc/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(creation)/create-technical-design-doc/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(creation)/cursor-subagent-creator/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(creation)/skill-architect/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(creation)/subagent-creator/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(decision-making)/the-fool/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(decision-making)/the-jury/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(design)/figma/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(design)/figma-implement-design/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(design)/frontend-design/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(design)/web-design-guidelines/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/codenavi/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/coding-guidelines/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/confluence-assistant/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/docs-writer/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/gh-address-comments/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/harness-eval/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/jira-assistant/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/nestjs-modular-monolith/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/not-your-babysitter/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/rails-dev/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/react-native-expert/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/shopify-developer/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/spec-driven-eval/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/tlc-discover/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/tlc-implement/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/tlc-plan/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/tlc-prd/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/tlc-spec-driven/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(development)/tlc-spec-lean/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/ai-cold-outreach/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/ai-pricing/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/ai-sdr/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/ai-seo/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/ai-ugc-ads/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/content-to-pipeline/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/expansion-retention/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/gtm-engineering/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/gtm-metrics/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/lead-enrichment/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/multi-platform-launch/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/paid-creative-ai/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/partner-affiliate/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/positioning-icp/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/sales-motion-design/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/social-selling/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/solo-founder-gtm/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(gtm)/video-outreach/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(learning)/learning-opportunities/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(monitoring)/sentry/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(performance)/core-web-vitals/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(performance)/perf-astro/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(performance)/perf-lighthouse/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(performance)/perf-web-optimization/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(quality)/react-best-practices/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(quality)/seo/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(quality)/the-judge/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(quality)/web-accessibility/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(quality)/web-best-practices/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(quality)/web-quality-audit/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(security)/security-best-practices/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(security)/security-ownership-map/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(security)/security-threat-model/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(tooling)/chrome-devtools/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(tooling)/excalidraw-studio/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(tooling)/gh-fix-ci/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(tooling)/mermaid-studio/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(tooling)/nx-ci-monitor/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(tooling)/nx-generate/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(tooling)/nx-run-tasks/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(tooling)/nx-workspace/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(web-automation)/demo/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

packages/skills-catalog/skills/(web-automation)/playwright-skill/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Local scripts

First observation → cebf9d4adc13

No earlier version was observed for comparison.

Compare on GitHub

View on GitHubAdd to my skills

Verified commit cebf9d4adc132f92dede7ec99b81b1ef0976d768

git clone --filter=blob:none --no-checkout https://github.com/tech-leads-club/agent-skills.git .hotskills/tech-leads-club-agent-skills && git -C .hotskills/tech-leads-club-agent-skills checkout --detach cebf9d4adc132f92dede7ec99b81b1ef0976d768 # Copy each selected skill directory from .hotskills/tech-leads-club-agent-skills into .claude/skills/<skill-name>/
git clone --filter=blob:none --no-checkout https://github.com/tech-leads-club/agent-skills.git .hotskills/tech-leads-club-agent-skills && git -C .hotskills/tech-leads-club-agent-skills checkout --detach cebf9d4adc132f92dede7ec99b81b1ef0976d768 # Copy each selected skill directory from .hotskills/tech-leads-club-agent-skills into .agents/skills/<skill-name>/
7.1kGitHub stars
21stars in 7 days
94skills in this repository
46commits in 30 days

Heat

6.1
  • Star growth, last 7 daysAhead of 60% of tracked repositories
  • Star growth, last 24 hoursAhead of 83% of tracked repositories
  • Rank movement, last 7 daysAhead of 60% of tracked repositories
  • Commits, last 30 daysAhead of 90% of tracked repositories
  • Accounts asking about it through MCP, last 7 daysNot available
  • Hot votes this weekAhead of 0% of tracked repositories

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

Aug 2, 2026Nov 6, 20267,141

Individual skills in this repository

How it works

component-common-domain-detection

When your agent uses it

Finds duplicate business logic spread across multiple components and suggests consolidation. Use when asking "where is this logic duplicated?", "find common code between services", "what can be consolidated?", "detect shared domain logic", or analyzing component overlap before refactoring. Do NOT use for code-level duplication detection (use linters) or dependency analysis (use coupling-analysis).

What it loads into context

Frontmatter

80 tokens

Always available to the agent

SKILL.md

3,715 tokens

When the skill is activated

Reference documents

4,502 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

  1. How to Use
  2. When to Use
  3. Core Concepts
  4. Analysis Process
  5. Output Format
  6. Analysis Checklist
  7. Implementation Notes
  8. Fitness Functions
  9. Best Practices
  10. Common Patterns to Look For
  11. Next Steps
  12. Notes

Files

  • ../../../../../.claude-plugin/marketplace.jsonasset789 bytes
  • ../../../../mcp/.claude-plugin/plugin.jsonasset274 bytes
  • QUICK-REFERENCE.mddoc4,011 bytes
  • README.mddoc17,237 bytes
  • SKILL.mdcore17,460 bytes
  • SKILL.mdcore17,460 bytes
  • SKILL.mdcore17,460 bytes
  • SKILL.mdcore17,460 bytes
  • SKILL.mdcore17,460 bytes

No excerpt is shown for this license. Read the source on GitHub.

View the complete source on GitHub

Skills included

  • component-common-domain-detection
  • component-flattening-analysis
  • component-identification-sizing
  • coupling-analysis
  • decomposition-planning-roadmap
  • domain-analysis
  • domain-identification-grouping
  • evolutionary-modular-architecture
  • frontend-blueprint
  • legacy-migration-planner
  • modular-decomposition
  • modular-design-principles
  • react-composition-patterns
  • tactical-ddd
  • aws-advisor
  • cloudflare-deploy
  • netlify-deploy
  • render-deploy
  • vercel-deploy
  • create-adr
  • create-rfc
  • technical-design-doc-creator
  • cursor-subagent-creator
  • skill-architect
  • subagent-creator
  • the-fool
  • the-jury
  • figma
  • figma-implement-design
  • frontend-design
  • web-design-guidelines
  • codenavi
  • coding-guidelines
  • confluence-assistant
  • docs-writer
  • gh-address-comments
  • harness-eval
  • jira-assistant
  • nestjs-modular-monolith
  • not-your-babysitter
  • rails-dev
  • react-native-expert
  • shopify-developer
  • spec-driven-eval
  • tlc-discover
  • tlc-implement
  • tlc-plan
  • tlc-prd
  • tlc-spec-driven
  • tlc-spec-lean
  • ai-cold-outreach
  • ai-pricing
  • ai-sdr
  • ai-seo
  • ai-ugc-ads
  • content-to-pipeline
  • expansion-retention
  • gtm-engineering
  • gtm-metrics
  • lead-enrichment
  • multi-platform-launch
  • paid-creative-ai
  • partner-affiliate
  • positioning-icp
  • sales-motion-design
  • social-selling
  • solo-founder-gtm
  • video-outreach
  • learning-opportunities
  • sentry
  • core-web-vitals
  • perf-astro
  • perf-lighthouse
  • perf-web-optimization
  • react-best-practices
  • seo
  • the-judge
  • tlc-generative-engine-optimization
  • accessibility
  • best-practices
  • web-quality-audit
  • security-best-practices
  • security-ownership-map
  • security-threat-model
  • chrome-devtools
  • excalidraw-studio
  • gh-fix-ci
  • mermaid-studio
  • nx-ci-monitor
  • nx-generate
  • nx-run-tasks
  • nx-workspace
  • demo
  • playwright-skill

Repository facts

License
No license detected
Created
Jan 19, 2026
Last pushed
Nov 5, 2026
Forks
568
Open issues
30
Project activity
Active

Rank over the last 12 weeks

Now #205 · best #186 · down 13 in 30 days

  1. #202 on Oct 30
  2. #204 on Oct 31
  3. #203 on Nov 1
  4. #205 on Nov 2
  5. #206 on Nov 3
  6. #205 since Nov 4
69 earlier periods
  1. #192 on Aug 2
  2. #196 on Aug 7
  3. #195 on Aug 8
  4. #196 on Aug 9
  5. #204 on Aug 10
  6. #203 on Aug 11
  7. #202 on Aug 12
  8. #206 on Aug 13
  9. #207 from Aug 14 to Aug 17
  10. #211 from Aug 18 to Aug 19
  11. #209 on Aug 20
  12. #211 on Aug 21
  13. #208 on Aug 22
  14. #213 on Aug 23
  15. #212 on Aug 24
  16. #214 from Aug 25 to Aug 26
  17. #216 on Aug 27
  18. #214 from Aug 28 to Aug 29
  19. #215 from Aug 30 to Aug 31
  20. #220 on Sep 1
  21. #214 on Sep 2
  22. #223 on Sep 3
  23. #220 on Sep 4
  24. #222 on Sep 5
  25. #219 on Sep 6
  26. #223 from Sep 7 to Sep 8
  27. #224 on Sep 9
  28. #223 on Sep 10
  29. #224 on Sep 11
  30. #220 on Sep 12
  31. #209 on Sep 13
  32. #198 on Sep 14
  33. #196 on Sep 15
  34. #193 on Sep 16
  35. #191 on Sep 17
  36. #193 on Sep 18
  37. #188 on Sep 19
  38. #190 on Sep 20
  39. #192 on Sep 21
  40. #190 from Sep 22 to Sep 24
  41. #188 from Sep 25 to Sep 27
  42. #189 from Sep 28 to Sep 29
  43. #186 on Sep 30
  44. #188 on Oct 1
  45. #191 on Oct 2
  46. #188 on Oct 3
  47. #186 on Oct 4
  48. #189 on Oct 5
  49. #190 on Oct 6
  50. #192 on Oct 7
  51. #190 on Oct 8
  52. #192 on Oct 9
  53. #190 on Oct 10
  54. #191 on Oct 11
  55. #192 on Oct 12
  56. #194 on Oct 13
  57. #193 on Oct 14
  58. #192 on Oct 15
  59. #191 on Oct 16
  60. #193 on Oct 17
  61. #195 from Oct 18 to Oct 19
  62. #194 on Oct 20
  63. #196 on Oct 21
  64. #195 on Oct 22
  65. #194 on Oct 23
  66. #196 on Oct 24
  67. #197 on Oct 25
  68. #199 on Oct 28
  69. #201 on Oct 29

Before you install

Network or broad shell

Automated signals, not a guarantee

Checked Nov 2, 2026

Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.

Show 232 notes
  • packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
Show all 3,710 signals by file

.claude-plugin/marketplace.json

  • Network accessline 10
    "version": "0.0.1",       "author": { "name": "Tech Leads Club" },       "homepage": "https://github.com/tech-leads-club/agent-skills",
  • Network accessline 11
    "author": { "name": "Tech Leads Club" },       "homepage": "https://github.com/tech-leads-club/agent-skills",       "repository": "https://github.com/tech-leads-club/agent-skills",
  • Network accessline 12
    "homepage": "https://github.com/tech-leads-club/agent-skills",
  • Network accessline 13
    "repository": "https://github.com/tech-leads-club/agent-skills",

packages/skills-catalog/skills/(architecture)/evolutionary-modular-architecture/assets/architecture-template.html

  • Network accessline 11
    <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>Platform — Architecture</title> <link rel="preconnect" href="https://fonts.googleapis.com" />
  • Network accessline 12
    <title>Platform — Architecture</title> <link rel="preconnect" href="https://fonts.googleapis.com" /> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
  • Network accessline 13
    <link rel="preconnect" href="https://fonts.googleapis.com" />
  • Network accessline 14
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
  • Network accessline 15
    <link href="https://fonts.googleapis.com/css2?family=Lato:wght@300;400;700;900&family=JetBrains+Mono:wght@400;500;700&display=swap" rel="stylesheet" />
  • Network accessline 211
    <!-- EXAMPLE DIAGRAM — context map. Replace the labels with your contexts. -->       <div class="diagram">         <svg viewBox="0 0 880 520" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Domain context map">
  • Network accessline 212
    <div class="diagram">         <svg viewBox="0 0 880 520" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Domain context map">           <rect x="20" y="34" width="840" height="104" rx="14" fill="#FDEAEC" stroke="#F25461" stroke-op
  • Network accessline 213
    <svg viewBox="0 0 880 520" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Domain context map">
  • Network accessline 277
    <!-- EXAMPLE DIAGRAM — monorepo layers. -->       <div class="diagram">         <svg viewBox="0 0 880 360" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Monorepo layers">
  • Network accessline 278
    <div class="diagram">         <svg viewBox="0 0 880 360" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Monorepo layers">           <defs>
  • Network accessline 279
    <svg viewBox="0 0 880 360" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Monorepo layers">

packages/skills-catalog/skills/(architecture)/evolutionary-modular-architecture/scripts/validate-boundaries.mjs

  • Executable scriptline 1
    #!/usr/bin/env node

packages/skills-catalog/skills/(architecture)/evolutionary-modular-architecture/scripts/validate-structure.mjs

  • Executable scriptline 1
    #!/usr/bin/env node

packages/skills-catalog/skills/(architecture)/frontend-blueprint/references/stitch-integration.md

  • Network accessline 95
    MCP Server URL:  https://stitch.googleapis.com/mcp
  • Network accessline 111
    Server URL:  https://stitch.googleapis.com/mcp
  • Network accessline 127
    {   "url": "https://stitch.googleapis.com/mcp",
  • Network accessline 128
    "url": "https://stitch.googleapis.com/mcp",
  • Network accessline 138
    [Credential-related source omitted]
  • Access to secretsline 155
    [Credential-related source omitted]
  • Network accessline 175
    | "Permission denied" | For OAuth: ensure `serviceUsageConsumer` role is granted | | Connection timeout | Stitch MCP is remote — check internet, retry in 30s | | Tool not found | Ensure MCP URL is exactly `https://stitch.googleapis.com/mcp`
  • Network accessline 176
    | Connection timeout | Stitch MCP is remote — check internet, retry in 30s | | Tool not found | Ensure MCP URL is exactly `https://stitch.googleapis.com/mcp` | | Config not recognized | Check your tool's MCP docs for the correct config form
  • Network accessline 177
    | Tool not found | Ensure MCP URL is exactly `https://stitch.googleapis.com/mcp` |

packages/skills-catalog/skills/(architecture)/react-composition-patterns/AGENTS.md

  • Network accessline 944
    1. [https://react.dev](https://react.dev)
  • Network accessline 945
    2. [https://react.dev/learn/passing-data-deeply-with-context](https://react.dev/learn/passing-data-deeply-with-context)
  • Network accessline 946
    3. [https://react.dev/reference/react/use](https://react.dev/reference/react/use)

packages/skills-catalog/skills/(architecture)/react-composition-patterns/rules/_template.md

  • Network accessline 24
    Reference: [Link](https://example.com)

packages/skills-catalog/skills/(cloud)/aws-advisor/references/mcp-guide.md

  • Network accessline 115
    # Find new Lambda features aws___recommend(url="https://docs.aws.amazon.com/lambda/latest/dg/welcome.html")
  • Network accessline 116
    aws___recommend(url="https://docs.aws.amazon.com/lambda/latest/dg/welcome.html")

packages/skills-catalog/skills/(cloud)/aws-advisor/scripts/architecture_validator.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(cloud)/aws-advisor/scripts/cost_considerations.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 35
    "Use Provisioned Concurrency only when needed",         ],         "calculator_link": "https://calculator.aws/#/addService/Lambda"
  • Network accessline 36
    ],         "calculator_link": "https://calculator.aws/#/addService/Lambda"     },
  • Network accessline 37
    "calculator_link": "https://calculator.aws/#/addService/Lambda"
  • Network accessline 54
    "Use request validation to reject invalid requests early",         ],         "calculator_link": "https://calculator.aws/#/addService/APIGateway"
  • Network accessline 55
    ],         "calculator_link": "https://calculator.aws/#/addService/APIGateway"     },
  • Network accessline 56
    "calculator_link": "https://calculator.aws/#/addService/APIGateway"
  • Network accessline 78
    "Use sparse indexes to reduce storage",         ],         "calculator_link": "https://calculator.aws/#/addService/DynamoDB"
  • Network accessline 79
    ],         "calculator_link": "https://calculator.aws/#/addService/DynamoDB"     },
  • Network accessline 80
    "calculator_link": "https://calculator.aws/#/addService/DynamoDB"
  • Network accessline 99
    "Enable S3 Analytics to understand access patterns",         ],         "calculator_link": "https://calculator.aws/#/addService/S3"
  • Network accessline 100
    ],         "calculator_link": "https://calculator.aws/#/addService/S3"     },
  • Network accessline 101
    "calculator_link": "https://calculator.aws/#/addService/S3"
  • Network accessline 121
    "Use Graviton instances for better price/performance",         ],         "calculator_link": "https://calculator.aws/#/addService/RDS"
  • Network accessline 122
    ],         "calculator_link": "https://calculator.aws/#/addService/RDS"     },
  • Network accessline 123
    "calculator_link": "https://calculator.aws/#/addService/RDS"
  • Network accessline 142
    "Consider ARM/Graviton for Fargate",         ],         "calculator_link": "https://calculator.aws/#/addService/Fargate"
  • Network accessline 143
    ],         "calculator_link": "https://calculator.aws/#/addService/Fargate"     },
  • Network accessline 144
    "calculator_link": "https://calculator.aws/#/addService/Fargate"
  • Network accessline 161
    "Set appropriate cache TTLs",         ],         "calculator_link": "https://calculator.aws/#/addService/CloudFront"
  • Network accessline 162
    ],         "calculator_link": "https://calculator.aws/#/addService/CloudFront"     },
  • Network accessline 163
    "calculator_link": "https://calculator.aws/#/addService/CloudFront"
  • Network accessline 178
    "Review if all traffic really needs NAT Gateway",         ],         "calculator_link": "https://calculator.aws/#/addService/VPC"
  • Network accessline 179
    ],         "calculator_link": "https://calculator.aws/#/addService/VPC"     },
  • Network accessline 180
    "calculator_link": "https://calculator.aws/#/addService/VPC"
  • Network accessline 194
    "Interface endpoints have cost per AZ - minimize AZ count if possible",         ],         "calculator_link": "https://calculator.aws/#/addService/VPC"
  • Network accessline 195
    ],         "calculator_link": "https://calculator.aws/#/addService/VPC"     },
  • Network accessline 196
    "calculator_link": "https://calculator.aws/#/addService/VPC"
  • Network accessline 209
    "Batch secrets when possible",         ],         "calculator_link": "https://calculator.aws/#/addService/SecretsManager"
  • Network accessline 210
    ],         "calculator_link": "https://calculator.aws/#/addService/SecretsManager"     },
  • Network accessline 211
    "calculator_link": "https://calculator.aws/#/addService/SecretsManager"
  • Network accessline 250
    "Review monthly for optimization opportunities",         ],         "calculator_link": "https://calculator.aws/#/"
  • Network accessline 251
    ],         "calculator_link": "https://calculator.aws/#/"     }
  • Network accessline 252
    "calculator_link": "https://calculator.aws/#/"

packages/skills-catalog/skills/(cloud)/aws-advisor/scripts/generate_diagram.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(cloud)/aws-advisor/scripts/security_review.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(cloud)/aws-advisor/scripts/well_architected_review.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/LICENSE.txt

  • Network accessline 1
    Apache License Version 2.0, January 2004 http://www.apache.org/licenses/
  • Network accessline 3
    http://www.apache.org/licenses/
  • Network accessline 195
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/agents-sdk/README.md

  • Access to secretsline 36
    [Credential-related source omitted]
  • Access to secretsline 52
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/agents-sdk/api.md

  • Access to secretsline 13
    [Credential-related source omitted]
  • Access to secretsline 99
    [Credential-related source omitted]
  • Access to secretsline 135
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/agents-sdk/configuration.md

  • Access to secretsline 30
    [Credential-related source omitted]
  • Access to secretsline 32
    [Credential-related source omitted]
  • Access to secretsline 49
    [Credential-related source omitted]
  • Network accessline 59
    export default {   fetch(request: Request, env: Env) {
  • Network accessline 60
    fetch(request: Request, env: Env) {
  • Network accessline 71
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 72
    async fetch(request: Request, env: Env) {
  • Network accessline 81
    const stub = env.MyAgent.get(id)     return stub.fetch(request)
  • Network accessline 82
    return stub.fetch(request)
  • Network accessline 92
    export default {   fetch(request: Request, env: Env) {
  • Network accessline 93
    fetch(request: Request, env: Env) {
  • Access to secretsline 136
    [Credential-related source omitted]
  • Network accessline 167
    {   "vars": {     "MCP_SERVER_URL": "https://mcp.example.com"
  • Network accessline 168
    "vars": {     "MCP_SERVER_URL": "https://mcp.example.com"   }
  • Network accessline 169
    "MCP_SERVER_URL": "https://mcp.example.com"
  • Access to secretsline 175
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/agents-sdk/gotchas.md

  • Access to secretsline 21
    [Credential-related source omitted]
  • Access to secretsline 97
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/agents-sdk/patterns.md

  • Access to secretsline 13
    [Credential-related source omitted]
  • Access to secretsline 71
    [Credential-related source omitted]
  • Access to secretsline 102
    [Credential-related source omitted]
  • Access to secretsline 131
    [Credential-related source omitted]
  • Access to secretsline 149
    [Credential-related source omitted]
  • Access to secretsline 168
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-gateway/README.md

  • Access to secretsline 40
    [Credential-related source omitted]
  • Network accessline 68
    [Credential-related source omitted]
  • Network accessline 69
    [Credential-related source omitted]
  • Access to secretsline 69
    [Credential-related source omitted]
  • Network accessline 70
    baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/compat`,
  • Network accessline 88
    export default {   async fetch(request, env, ctx) {
  • Network accessline 89
    async fetch(request, env, ctx) {
  • Network accessline 150
    - Unified API (OpenAI-compatible): `https://gateway.ai.cloudflare.com/v1/{account_id}/{gateway_id}/compat/chat/completions`
  • Network accessline 151
    - Provider-specific: `https://gateway.ai.cloudflare.com/v1/{account_id}/{gateway_id}/{provider}/{endpoint}`
  • Network accessline 173
    - [Official Docs](https://developers.cloudflare.com/ai-gateway/)
  • Network accessline 174
    - [API Reference](https://developers.cloudflare.com/api/resources/ai_gateway/)
  • Network accessline 175
    - [Provider Guides](https://developers.cloudflare.com/ai-gateway/usage/providers/)
  • Network accessline 176
    - [Discord Community](https://discord.cloudflare.com)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-gateway/configuration.md

  • Network accessline 12
    [Credential-related source omitted]
  • Access to secretsline 12
    [Credential-related source omitted]
  • Access to secretsline 13
    [Credential-related source omitted]
  • Access to secretsline 31
    [Credential-related source omitted]
  • Network accessline 39
    const client = new OpenAI({   baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
  • Network accessline 40
    baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
  • Network accessline 50
    const client = new OpenAI({   baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
  • Network accessline 51
    baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
  • Network accessline 63
    [Credential-related source omitted]
  • Network accessline 64
    [Credential-related source omitted]
  • Access to secretsline 64
    [Credential-related source omitted]
  • Network accessline 65
    baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
  • Network accessline 78
    # List curl https://api.cloudflare.com/client/v4/accounts/{account_id}/ai-gateway/gateways \
  • Network accessline 79
    [Credential-related source omitted]
  • Access to secretsline 79
    [Credential-related source omitted]
  • Access to secretsline 80
    [Credential-related source omitted]
  • Network accessline 82
    # Get curl .../gateways/{gateway_id}
  • Network accessline 83
    curl .../gateways/{gateway_id}
  • Network accessline 85
    # Update curl -X PUT .../gateways/{gateway_id} \
  • Network accessline 86
    curl -X PUT .../gateways/{gateway_id} \
  • Network accessline 89
    # Delete curl -X DELETE .../gateways/{gateway_id}
  • Network accessline 90
    curl -X DELETE .../gateways/{gateway_id}
  • Network accessline 104
    [Credential-related source omitted]
  • Network accessline 105
    [Credential-related source omitted]
  • Access to secretsline 105
    [Credential-related source omitted]
  • Network accessline 106
    [Credential-related source omitted]
  • Access to secretsline 106
    [Credential-related source omitted]
  • Access to secretsline 107
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-gateway/sdk-integration.md

  • Access to secretsline 13
    [Credential-related source omitted]
  • Access to secretsline 16
    [Credential-related source omitted]
  • Network accessline 45
    [Credential-related source omitted]
  • Network accessline 46
    [Credential-related source omitted]
  • Access to secretsline 46
    [Credential-related source omitted]
  • Network accessline 47
    baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
  • Network accessline 58
    [Credential-related source omitted]
  • Network accessline 59
    [Credential-related source omitted]
  • Access to secretsline 59
    [Credential-related source omitted]
  • Network accessline 60
    baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/anthropic`,
  • Network accessline 86
    new ChatOpenAI({   configuration: {     baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
  • Network accessline 87
    configuration: {     baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,   },
  • Network accessline 88
    baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
  • Network accessline 96
    [Credential-related source omitted]
  • Access to secretsline 96
    [Credential-related source omitted]
  • Access to secretsline 97
    [Credential-related source omitted]
  • Access to secretsline 98
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-gateway/troubleshooting.md

  • Network accessline 14
    const client = new OpenAI({   baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
  • Network accessline 15
    baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`,
  • Access to secretsline 16
    [Credential-related source omitted]
  • Network accessline 70
    # Test connectivity curl -v https://gateway.ai.cloudflare.com/v1/{account}/{gateway}/openai/models \
  • Network accessline 71
    [Credential-related source omitted]
  • Access to secretsline 71
    [Credential-related source omitted]
  • Access to secretsline 72
    [Credential-related source omitted]
  • Access to secretsline 73
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-search/README.md

  • Network accessline 53
    export default {   async fetch(request, env) {
  • Network accessline 54
    async fetch(request, env) {
  • Network accessline 143
    - [Cloudflare AI Search Docs](https://developers.cloudflare.com/ai-search/)
  • Network accessline 144
    - [Workers AI Docs](https://developers.cloudflare.com/workers-ai/)
  • Network accessline 145
    - [Vectorize Docs](https://developers.cloudflare.com/vectorize/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-search/api.md

  • Network accessline 82
    curl https://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/autorag/rags/{NAME}/ai-search \

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/analytics-engine/README.md

  • Access to secretsline 24
    [Credential-related source omitted]
  • Network accessline 94
    - [Cloudflare Analytics Engine Docs](https://developers.cloudflare.com/analytics/analytics-engine/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/analytics-engine/api.md

  • Network accessline 30
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 31
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 56
    curl -X POST https://api.cloudflare.com/client/v4/accounts/{account_id}/analytics_engine/sql \

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/analytics-engine/configuration.md

  • Network accessline 37
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 38
    async fetch(request: Request, env: Env) {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/analytics-engine/gotchas.md

  • Access to secretsline 41
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/analytics-engine/patterns.md

  • Access to secretsline 7
    [Credential-related source omitted]
  • Access to secretsline 23
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api-shield/README.md

  • Network accessline 42
    - [API Shield Docs](https://developers.cloudflare.com/api-shield/)
  • Network accessline 43
    - [API Reference](https://developers.cloudflare.com/api/resources/api_gateway/)
  • Network accessline 44
    - [OWASP API Security Top 10](https://owasp.org/www-project-api-security/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api-shield/api.md

  • Network accessline 45
    export default {   async fetch(req, env) {
  • Network accessline 46
    async fetch(req, env) {
  • Network accessline 60
    export default {   async fetch(req, env) {
  • Network accessline 61
    async fetch(req, env) {
  • Network accessline 74
    export default {   async scheduled(event, env) {     const jwks = await (await fetch('https://auth.example.com/.well-known/jwks.json')).json()
  • Network accessline 75
    async scheduled(event, env) {     const jwks = await (await fetch('https://auth.example.com/.well-known/jwks.json')).json()     await fetch(
  • Network accessline 76
    const jwks = await (await fetch('https://auth.example.com/.well-known/jwks.json')).json()
  • Network accessline 77
    await fetch(
  • Network accessline 78
    `https://api.cloudflare.com/client/v4/zones/${env.ZONE_ID}/api_gateway/token_validation/${env.CONFIG_ID}`,
  • Access to secretsline 81
    [Credential-related source omitted]
  • Network accessline 148
    - [configuration.md](configuration.md) - Setup guides for all features - [patterns.md](patterns.md) - Firewall rules and common patterns - [API Gateway API Docs](https://developers.cloudflare.com/api/resources/api_gateway/)
  • Network accessline 150
    - [API Gateway API Docs](https://developers.cloudflare.com/api/resources/api_gateway/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api-shield/configuration.md

  • Network accessline 103
    openssl req -x509 -newkey rsa:4096 -keyout client-key.pem -out client-cert.pem -days 365 curl https://api.example.com/endpoint --cert client-cert.pem --key client-key.pem
  • Network accessline 104
    curl https://api.example.com/endpoint --cert client-cert.pem --key client-key.pem

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api-shield/gotchas.md

  • Network accessline 130
    - [configuration.md](configuration.md) - Setup guides to avoid common issues - [patterns.md](patterns.md) - Best practices and progressive rollout - [API Shield Docs](https://developers.cloudflare.com/api-shield/)
  • Network accessline 132
    - [API Shield Docs](https://developers.cloudflare.com/api-shield/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api/README.md

  • Network accessline 9
    ├─ From Workers runtime → Use bindings, not REST API (see ../bindings/) ├─ Server-side (Node/Python/Go) → Official SDK (see api.md) ├─ CLI/scripts → Wrangler or curl (see configuration.md)
  • Network accessline 10
    ├─ Server-side (Node/Python/Go) → Official SDK (see api.md) ├─ CLI/scripts → Wrangler or curl (see configuration.md) ├─ Infrastructure-as-code → See ../pulumi/ or ../terraform/
  • Network accessline 11
    ├─ CLI/scripts → Wrangler or curl (see configuration.md)
  • Network accessline 13
    └─ One-off requests → curl examples (see api.md)
  • Network accessline 63
    - [Cloudflare API Docs](https://developers.cloudflare.com/api/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api/api.md

  • Access to secretsline 11
    [Credential-related source omitted]
  • Access to secretsline 20
    [Credential-related source omitted]
  • Access to secretsline 24
    [Credential-related source omitted]
  • Access to secretsline 36
    [Credential-related source omitted]
  • Access to secretsline 47
    [Credential-related source omitted]
  • Network accessline 49
    [Credential-related source omitted]
  • Access to secretsline 49
    [Credential-related source omitted]
  • Access to secretsline 50
    [Credential-related source omitted]
  • Network accessline 58
    [Credential-related source omitted]
  • Access to secretsline 58
    [Credential-related source omitted]
  • Access to secretsline 60
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api/configuration.md

  • Access to secretsline 9
    [Credential-related source omitted]
  • Access to secretsline 10
    [Credential-related source omitted]
  • Access to secretsline 15
    [Credential-related source omitted]
  • Access to secretsline 18
    [Credential-related source omitted]
  • Access to secretsline 28
    [Credential-related source omitted]
  • Access to secretsline 37
    [Credential-related source omitted]
  • Access to secretsline 46
    [Credential-related source omitted]
  • Network accessline 47
    timeout: 120000, // 2 min (default 60s), in milliseconds   maxRetries: 5, // default 2   baseURL: 'https://...', // proxy (rare)
  • Network accessline 48
    maxRetries: 5, // default 2   baseURL: 'https://...', // proxy (rare) })
  • Network accessline 49
    baseURL: 'https://...', // proxy (rare)
  • Access to secretsline 60
    [Credential-related source omitted]
  • Network accessline 61
    timeout=120,         # seconds (default 60)     max_retries=5,       # default 2     base_url="https://...",  # proxy (rare)
  • Network accessline 62
    max_retries=5,       # default 2     base_url="https://...",  # proxy (rare) )
  • Network accessline 63
    base_url="https://...",  # proxy (rare)
  • Access to secretsline 74
    [Credential-related source omitted]
  • Network accessline 75
    option.WithMaxRetries(5),  // default 10 (higher than TS/Python)     option.WithRequestTimeout(2 * time.Minute),  // default 60s     option.WithBaseURL("https://..."),  // proxy (rare)
  • Network accessline 76
    option.WithRequestTimeout(2 * time.Minute),  // default 60s     option.WithBaseURL("https://..."),  // proxy (rare) )
  • Network accessline 77
    option.WithBaseURL("https://..."),  // proxy (rare)
  • Access to secretsline 128
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api/gotchas.md

  • Access to secretsline 113
    [Credential-related source omitted]
  • Access to secretsline 135
    [Credential-related source omitted]
  • Access to secretsline 217
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/argo-smart-routing/README.md

  • Network accessline 14
    curl -X PATCH "https://api.cloudflare.com/client/v4/zones/{zone_id}/argo/smart_routing" \
  • Access to secretsline 25
    [Credential-related source omitted]
  • Network accessline 93
    - [Cloudflare Argo Smart Routing Docs](https://developers.cloudflare.com/argo-smart-routing/)
  • Network accessline 94
    - [Cloudflare Smart Shield](https://developers.cloudflare.com/smart-shield/)
  • Network accessline 95
    - [Spectrum Documentation](https://developers.cloudflare.com/spectrum/)
  • Network accessline 96
    - [Tiered Cache](https://developers.cloudflare.com/cache/how-to/tiered-cache/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/argo-smart-routing/api.md

  • Network accessline 8
    https://api.cloudflare.com/client/v4
  • Network accessline 27
    **cURL Example:**
  • Network accessline 30
    curl -X GET "https://api.cloudflare.com/client/v4/zones/{zone_id}/argo/smart_routing" \
  • Access to secretsline 57
    [Credential-related source omitted]
  • Access to secretsline 69
    [Credential-related source omitted]
  • Network accessline 89
    **cURL Example:**
  • Network accessline 92
    curl -X PATCH "https://api.cloudflare.com/client/v4/zones/{zone_id}/argo/smart_routing" \

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/argo-smart-routing/configuration.md

  • Access to secretsline 117
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/argo-smart-routing/gotchas.md

  • Network accessline 111
    - [Official Argo Smart Routing Docs](https://developers.cloudflare.com/argo-smart-routing/)
  • Network accessline 112
    - [Cloudflare Smart Shield](https://developers.cloudflare.com/smart-shield/)
  • Network accessline 113
    - [API Authentication](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/)
  • Network accessline 114
    - [Cloudflare TypeScript SDK](https://github.com/cloudflare/cloudflare-typescript)
  • Network accessline 115
    - [Cloudflare Python SDK](https://github.com/cloudflare/cloudflare-python)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bindings/README.md

  • Network accessline 32
    | Binding               | Use Case             | Access Pattern              | | --------------------- | -------------------- | --------------------------- | | **Service**           | Worker-to-Worker RPC | `env.MY_SERVICE.fetch(req)` |
  • Network accessline 33
    | --------------------- | -------------------- | --------------------------- | | **Service**           | Worker-to-Worker RPC | `env.MY_SERVICE.fetch(req)` | | **Workers AI**        | LLM inference        | `env.AI.run(model, input)`  |
  • Network accessline 34
    | **Service**           | Worker-to-Worker RPC | `env.MY_SERVICE.fetch(req)` |
  • Network accessline 36
    | **Browser Rendering** | Headless Chrome      | `env.BROWSER.fetch(url)`    |
  • Access to secretsline 53
    [Credential-related source omitted]
  • Network accessline 100
    export default {   async fetch(request, env, ctx) {
  • Network accessline 101
    async fetch(request, env, ctx) {
  • Network accessline 126
    - [Cloudflare Docs: Bindings](https://developers.cloudflare.com/workers/runtime-apis/bindings/)
  • Network accessline 127
    - [Wrangler Configuration](https://developers.cloudflare.com/workers/wrangler/configuration/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bindings/api.md

  • Access to secretsline 24
    [Credential-related source omitted]
  • Network accessline 50
    ### Method 1: fetch() Handler (Recommended)
  • Network accessline 53
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 54
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 93
    **Avoid:** Use fetch() handler instead (Method 1).
  • Network accessline 148
    await env.MY_SERVICE.fetch(new Request('https://fake/path'))
  • Network accessline 166
    const id = env.MY_DO.idFromName('user-123') const stub = env.MY_DO.get(id) await stub.fetch(new Request('https://fake/increment'))
  • Network accessline 168
    await stub.fetch(new Request('https://fake/increment'))
  • Network accessline 190
    // ❌ BAD async fetch(request: Request, env: any) { }
  • Network accessline 191
    async fetch(request: Request, env: any) { }
  • Network accessline 193
    // ✅ GOOD async fetch(request: Request, env: Env) { }
  • Network accessline 194
    async fetch(request: Request, env: Env) { }
  • Network accessline 213
    - [Workers Types Package](https://www.npmjs.com/package/@cloudflare/workers-types)
  • Network accessline 214
    - [Wrangler Types Command](https://developers.cloudflare.com/workers/wrangler/commands/#types)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bindings/configuration.md

  • Network accessline 72
    {   "vars": {     "API_URL": "https://api.example.com",
  • Network accessline 73
    "vars": {     "API_URL": "https://api.example.com",     "MAX_RETRIES": "3",
  • Network accessline 74
    "API_URL": "https://api.example.com",
  • Access to secretsline 86
    [Credential-related source omitted]
  • Network accessline 142
    "vars": { "API_URL": "https://api.example.com" },
  • Network accessline 168
    private env: Env,   ) {}   async fetch(request: Request) {
  • Network accessline 169
    ) {}   async fetch(request: Request) {     /* ... */
  • Network accessline 170
    async fetch(request: Request) {
  • Network accessline 200
    - [Wrangler Configuration](https://developers.cloudflare.com/workers/wrangler/configuration/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bindings/gotchas.md

  • Access to secretsline 9
    [Credential-related source omitted]
  • Network accessline 11
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 12
    async fetch(request: Request, env: Env) {
  • Network accessline 27
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 28
    async fetch(request: Request, env: Env) {
  • Access to secretsline 29
    [Credential-related source omitted]
  • Access to secretsline 123
    [Credential-related source omitted]
  • Access to secretsline 150
    [Credential-related source omitted]
  • Access to secretsline 151
    [Credential-related source omitted]
  • Network accessline 209
    - [Workers Limits](https://developers.cloudflare.com/workers/platform/limits/)
  • Network accessline 210
    - [Wrangler Commands](https://developers.cloudflare.com/workers/wrangler/commands/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bindings/patterns.md

  • Network accessline 8
    // auth-worker export default {   async fetch(request: Request, env: Env) {
  • Network accessline 9
    [Credential-related source omitted]
  • Network accessline 10
    async fetch(request: Request, env: Env) {
  • Network accessline 16
    // api-worker const response = await env.AUTH_SERVICE.fetch(
  • Network accessline 17
    const response = await env.AUTH_SERVICE.fetch(
  • Network accessline 18
    new Request('https://fake-host/validate', {
  • Network accessline 29
    // ❌ HTTP (slow, paid, cross-region latency) await fetch('https://auth-worker.example.com/validate')
  • Network accessline 30
    await fetch('https://auth-worker.example.com/validate')
  • Network accessline 32
    // ✅ Service binding (fast, free, same isolate) await env.AUTH_SERVICE.fetch(new Request('https://fake-host/validate'))
  • Network accessline 33
    await env.AUTH_SERVICE.fetch(new Request('https://fake-host/validate'))
  • Network accessline 50
    // auth-worker export default {   async fetch(request: Request): Promise<Response> {
  • Network accessline 51
    export default {   async fetch(request: Request): Promise<Response> {     const body: AuthRequest = await request.json()
  • Network accessline 52
    async fetch(request: Request): Promise<Response> {
  • Network accessline 59
    // api-worker const response = await env.AUTH_SERVICE.fetch(
  • Network accessline 60
    const response = await env.AUTH_SERVICE.fetch(
  • Network accessline 61
    new Request('https://fake/validate', {
  • Access to secretsline 73
    [Credential-related source omitted]
  • Access to secretsline 74
    [Credential-related source omitted]
  • Access to secretsline 75
    [Credential-related source omitted]
  • Network accessline 79
    // Use secret const response = await fetch('https://api.example.com', {
  • Network accessline 80
    const response = await fetch('https://api.example.com', {
  • Access to secretsline 81
    [Credential-related source omitted]
  • Access to secretsline 89
    [Credential-related source omitted]
  • Network accessline 113
    const response = await worker.fetch(new Request('http://localhost/test'), mockEnv, mockCtx)
  • Network accessline 177
    const id = env.COUNTER.idFromName('global') const stub = env.COUNTER.get(id) await stub.fetch(new Request('https://fake/increment'))
  • Network accessline 179
    await stub.fetch(new Request('https://fake/increment'))
  • Access to secretsline 188
    [Credential-related source omitted]
  • Network accessline 190
    **❌ Using REST API:** `fetch('https://api.cloudflare.com/.../kv/...')`
  • Network accessline 199
    [Credential-related source omitted]
  • Access to secretsline 199
    [Credential-related source omitted]
  • Network accessline 200
    [Credential-related source omitted]
  • Access to secretsline 200
    [Credential-related source omitted]
  • Network accessline 204
    - [Service Bindings Docs](https://developers.cloudflare.com/workers/runtime-apis/bindings/service-bindings/)
  • Network accessline 205
    - [Miniflare Testing](https://miniflare.dev/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bot-management/README.md

  • Network accessline 64
    // Workers: Check bot score export default {   async fetch(request: Request): Promise<Response> {
  • Network accessline 65
    export default {   async fetch(request: Request): Promise<Response> {     const botScore = request.cf?.botManagement?.score
  • Network accessline 66
    async fetch(request: Request): Promise<Response> {
  • Network accessline 69
    return new Response('Bot detected', { status: 403 })     }     return fetch(request)
  • Network accessline 70
    }     return fetch(request)   },
  • Network accessline 71
    return fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bot-management/api.md

  • Network accessline 25
    export default {   async fetch(request: Request): Promise<Response> {
  • Network accessline 26
    async fetch(request: Request): Promise<Response> {
  • Network accessline 30
    if (!botMgmt) return fetch(request)
  • Network accessline 31
    if (botMgmt.verifiedBot) return fetch(request) // Allow verified bots
  • Network accessline 35
    return fetch(request)
  • Network accessline 84
    export default {   async fetch(request: Request): Promise<Response> {
  • Network accessline 85
    async fetch(request: Request): Promise<Response> {
  • Network accessline 89
    if (!ja4Signals) return fetch(request) // Not available for HTTP or Worker routing
  • Network accessline 100
    return fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bot-management/patterns.md

  • Network accessline 69
    // Low score + not corporate proxy = likely datacenter bot export default {   async fetch(request: Request): Promise<Response> {
  • Network accessline 70
    export default {   async fetch(request: Request): Promise<Response> {     const cf = request.cf as IncomingRequestCfProperties | undefined
  • Network accessline 71
    async fetch(request: Request): Promise<Response> {
  • Network accessline 79
    return fetch(request)
  • Network accessline 89
    // Add delay proportional to bot suspicion export default {   async fetch(request: Request): Promise<Response> {
  • Network accessline 90
    export default {   async fetch(request: Request): Promise<Response> {     const cf = request.cf as IncomingRequestCfProperties | undefined
  • Network accessline 91
    async fetch(request: Request): Promise<Response> {
  • Network accessline 101
    return fetch(request)
  • Network accessline 138
    export default {   async fetch(request: Request): Promise<Response> {
  • Network accessline 139
    async fetch(request: Request): Promise<Response> {
  • Network accessline 144
    if (botMgmt?.staticResource) return fetch(request) // Skip static
  • Network accessline 156
    return fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/browser-rendering/README.md

  • Network accessline 84
    - [Cloudflare Docs](https://developers.cloudflare.com/browser-rendering/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/browser-rendering/api.md

  • Network accessline 5
    **Base:** `https://api.cloudflare.com/client/v4/accounts/{accountId}/browser-rendering`
  • Network accessline 22
    curl -X POST '.../browser-rendering/screenshot' \
  • Network accessline 24
    -d '{"url":"https://example.com","screenshotOptions":{"fullPage":true}}'
  • Network accessline 39
    const browser = await puppeteer.launch(env.MYBROWSER, { keep_alive: 600000 }) const page = await browser.newPage() await page.goto('https://example.com', { waitUntil: 'networkidle0' })
  • Network accessline 41
    await page.goto('https://example.com', { waitUntil: 'networkidle0' })
  • Network accessline 71
    await page.goto('https://example.com', { waitUntil: 'networkidle' })

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/browser-rendering/configuration.md

  • Network accessline 34
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 35
    async fetch(request: Request, env: Env): Promise<Response> {
  • Access to secretsline 38
    [Credential-related source omitted]
  • Network accessline 54
    curl -X POST \
  • Network accessline 55
    'https://api.cloudflare.com/client/v4/accounts/{accountId}/browser-rendering/screenshot' \
  • Network accessline 57
    -d '{"url": "https://example.com"}' --output screenshot.png

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/browser-rendering/gotchas.md

  • Network accessline 25
    try {   const page = await browser.newPage()   await page.goto('https://example.com')
  • Network accessline 26
    const page = await browser.newPage()   await page.goto('https://example.com')   return new Response(await page.content())
  • Network accessline 27
    await page.goto('https://example.com')

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/browser-rendering/patterns.md

  • Network accessline 8
    export default {   async fetch(request, env) {
  • Network accessline 9
    async fetch(request, env) {
  • Network accessline 11
    try {       const page = await browser.newPage()       await page.goto('https://example.com')
  • Network accessline 12
    const page = await browser.newPage()       await page.goto('https://example.com')       return new Response(await page.content())
  • Network accessline 13
    await page.goto('https://example.com')

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/c3/configuration.md

  • Network accessline 17
    {   "$schema": "https://raw.githubusercontent.com/cloudflare/workers-sdk/main/packages/wrangler/config-schema.json",
  • Network accessline 18
    "$schema": "https://raw.githubusercontent.com/cloudflare/workers-sdk/main/packages/wrangler/config-schema.json",

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/c3/gotchas.md

  • Dangerous shell operationline 49
    rm pnpm-lock.yaml  # If using npm
  • Dangerous shell operationline 50
    rm package-lock.json  # If using pnpm

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cache-reserve/README.md

  • Network accessline 102
    # Enable via Dashboard https://dash.cloudflare.com/caching/cache-reserve
  • Network accessline 103
    https://dash.cloudflare.com/caching/cache-reserve
  • Network accessline 115
    # Check Cache Reserve status curl -X GET "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/cache/cache_reserve" \
  • Network accessline 116
    [Credential-related source omitted]
  • Access to secretsline 116
    [Credential-related source omitted]
  • Access to secretsline 117
    [Credential-related source omitted]
  • Network accessline 119
    # Enable Cache Reserve curl -X PATCH "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/cache/cache_reserve" \
  • Network accessline 120
    [Credential-related source omitted]
  • Access to secretsline 120
    [Credential-related source omitted]
  • Access to secretsline 121
    [Credential-related source omitted]
  • Network accessline 125
    # Check asset cache status curl -I https://example.com/asset.jpg | grep -i cache
  • Network accessline 126
    curl -I https://example.com/asset.jpg | grep -i cache

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cache-reserve/api.md

  • Network accessline 10
    │ • Cache Reserve → zone-level setting, automatic, no per-req   │ │ • You CANNOT selectively write to Cache Reserve from Workers  │ │ • Cache Reserve works with standard fetch(), not cache.put()  │
  • Network accessline 11
    │ • You CANNOT selectively write to Cache Reserve from Workers  │ │ • Cache Reserve works with standard fetch(), not cache.put()  │ └────────────────────────────────────────────────────────────────┘
  • Network accessline 12
    │ • Cache Reserve works with standard fetch(), not cache.put()  │
  • Network accessline 18
    ### Standard Fetch (Recommended)
  • Network accessline 21
    // Cache Reserve works automatically via standard fetch export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 22
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     // Standard fetch uses Cache Reserve automatically
  • Network accessline 23
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 24
    // Standard fetch uses Cache Reserve automatically     return await fetch(request)   },
  • Network accessline 25
    return await fetch(request)
  • Network accessline 37
    let response = await cache.match(request) if (!response) {   response = await fetch(request)
  • Network accessline 38
    if (!response) {   response = await fetch(request)   await cache.put(request, response.clone()) // Bypasses Cache Reserve!
  • Network accessline 39
    response = await fetch(request)
  • Network accessline 43
    // ✅ CORRECT: Use standard fetch for Cache Reserve compatibility return await fetch(request)
  • Network accessline 44
    return await fetch(request)
  • Network accessline 48
    let response = await customCache.match(request) if (!response) {   response = await fetch(request)
  • Network accessline 49
    if (!response) {   response = await fetch(request)   await customCache.put(request, response.clone()) // Custom cache OK
  • Network accessline 50
    response = await fetch(request)
  • Network accessline 60
    // Purge specific URL from Cache Reserve immediately const purgeCacheReserveByURL = async (zoneId: string, apiToken: string, urls: string[]) => {   const response = await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cac
  • Network accessline 61
    const purgeCacheReserveByURL = async (zoneId: string, apiToken: string, urls: string[]) => {   const response = await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cache`, {     method: 'POST',
  • Network accessline 62
    const response = await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cache`, {
  • Network accessline 73
    // Example usage await purgeCacheReserveByURL('zone123', 'token456', ['https://example.com/image.jpg', 'https://example.com/video.mp4'])
  • Network accessline 74
    await purgeCacheReserveByURL('zone123', 'token456', ['https://example.com/image.jpg', 'https://example.com/video.mp4'])
  • Network accessline 80
    // Purge by cache tag - forces revalidation, not immediate removal await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cache`, {
  • Network accessline 81
    await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cache`, {
  • Network accessline 96
    // Requires Cache Reserve OFF first await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/cache/cache_reserve_clear`, {
  • Network accessline 97
    await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/cache/cache_reserve_clear`, {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cache-reserve/configuration.md

  • Network accessline 8
    # Navigate to dashboard https://dash.cloudflare.com/caching/cache-reserve
  • Network accessline 9
    https://dash.cloudflare.com/caching/cache-reserve
  • Network accessline 24
    # Enable curl -X PATCH "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/cache/cache_reserve" \
  • Network accessline 25
    [Credential-related source omitted]
  • Access to secretsline 25
    [Credential-related source omitted]
  • Access to secretsline 26
    [Credential-related source omitted]
  • Network accessline 29
    # Check status curl -X GET "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/cache/cache_reserve" \
  • Network accessline 30
    [Credential-related source omitted]
  • Access to secretsline 30
    [Credential-related source omitted]
  • Access to secretsline 31
    [Credential-related source omitted]
  • Access to secretsline 44
    [Credential-related source omitted]
  • Access to secretsline 69
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cache-reserve/gotchas.md

  • Network accessline 81
    - **Official Docs**: https://developers.cloudflare.com/cache/advanced-configuration/cache-reserve/
  • Network accessline 82
    - **API Reference**: https://developers.cloudflare.com/api/resources/cache/subresources/cache_reserve/
  • Network accessline 83
    - **Cache Rules**: https://developers.cloudflare.com/cache/how-to/cache-rules/
  • Network accessline 84
    - **Workers Cache API**: https://developers.cloudflare.com/workers/runtime-apis/cache/
  • Network accessline 85
    - **R2 Documentation**: https://developers.cloudflare.com/r2/
  • Network accessline 86
    - **Smart Shield**: https://developers.cloudflare.com/smart-shield/
  • Network accessline 87
    - **Tiered Cache**: https://developers.cloudflare.com/cache/how-to/tiered-cache/

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cache-reserve/patterns.md

  • Network accessline 66
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 67
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 68
    const response = await fetch(request)
  • Network accessline 96
    // Optimal: L1 (visitor) → L2 (region) → L3 (Cache Reserve) → Origin export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 97
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     const url = new URL(request.url)
  • Network accessline 98
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 99
    const url = new URL(request.url)     const isImmutable = /\.[a-f0-9]{8,}\.(js|css|jpg|png|woff2)$/.test(url.pathname)     const response = await fetch(request)
  • Network accessline 101
    const response = await fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/containers/README.md

  • Network accessline 31
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 32
    async fetch(request: Request, env: Env) {
  • Network accessline 33
    const container = env.MY_CONTAINER.getByName('instance-1')     await container.startAndWaitForPorts()     return container.fetch(request)
  • Network accessline 34
    await container.startAndWaitForPorts()     return container.fetch(request)   },
  • Network accessline 35
    return container.fetch(request)
  • Network accessline 85
    - [Workflows](../workflows/) - Orchestrate container operations - [Queues](../queues/) - Trigger containers from queue messages - [Cloudflare Docs](https://developers.cloudflare.com/containers/)
  • Network accessline 87
    - [Cloudflare Docs](https://developers.cloudflare.com/containers/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/containers/api.md

  • Network accessline 78
    ### fetch() - HTTP with WebSocket support
  • Network accessline 81
    // ✅ Supports WebSocket upgrades const response = await container.fetch(request)
  • Network accessline 82
    const response = await container.fetch(request)
  • Network accessline 83
    const response = await container.fetch('http://container/api', {
  • Network accessline 98
    **⚠<U+FE0F> Critical:** Use `fetch()` for WebSocket, not `containerFetch()`.
  • Network accessline 114
    this.switchPort(8081) // Subsequent fetch() uses this port
  • Network accessline 163
    export class ScheduledContainer extends Container {   async fetch(request: Request) {
  • Network accessline 164
    async fetch(request: Request) {
  • Network accessline 190
    export class MyContainer extends Container {   async fetch(request: Request) {
  • Network accessline 191
    async fetch(request: Request) {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/containers/configuration.md

  • Network accessline 105
    export class MyContainer extends Container {   // Port Configuration   defaultPort = 8080 // Default port for fetch() calls
  • Network accessline 106
    // Port Configuration   defaultPort = 8080 // Default port for fetch() calls   requiredPorts = [8080, 9090] // Ports to wait for in startAndWaitForPorts()
  • Network accessline 107
    defaultPort = 8080 // Default port for fetch() calls
  • Network accessline 133
    - **`defaultPort`**: Port used when calling `container.fetch()` without explicit port. Falls back to port 33 if not set.

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/containers/gotchas.md

  • Network accessline 3
    ### ⚠<U+FE0F> WebSocket: fetch() vs containerFetch()
  • Network accessline 9
    **Fix:** Always use `fetch()` for WebSocket
  • Network accessline 15
    // ✅ CORRECT return container.fetch(request)
  • Network accessline 16
    return container.fetch(request)
  • Network accessline 28
    // ❌ WRONG await container.start() return container.fetch(request)
  • Network accessline 30
    return container.fetch(request)
  • Network accessline 32
    // ✅ CORRECT await container.startAndWaitForPorts() return container.fetch(request)
  • Network accessline 34
    return container.fetch(request)
  • Network accessline 103
    **Cause:** Calling `fetch()` before port ready
  • Network accessline 164
    1. **Use `startAndWaitForPorts()` by default** - Prevents port errors 2. **Set appropriate `sleepAfter`** - Balance resources vs cold starts 3. **Use `fetch()` for WebSocket** - Not `containerFetch()`
  • Network accessline 165
    2. **Set appropriate `sleepAfter`** - Balance resources vs cold starts 3. **Use `fetch()` for WebSocket** - Not `containerFetch()` 4. **Design for restarts** - Ephemeral disk, implement graceful shutdown
  • Network accessline 166
    3. **Use `fetch()` for WebSocket** - Not `containerFetch()`

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/containers/patterns.md

  • Network accessline 11
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 12
    async fetch(request: Request, env: Env) {
  • Network accessline 14
    const container = env.SESSION_BACKEND.getByName(sessionId)     await container.startAndWaitForPorts()     return container.fetch(request)
  • Network accessline 15
    await container.startAndWaitForPorts()     return container.fetch(request)   },
  • Network accessline 16
    return container.fetch(request)
  • Network accessline 26
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 27
    async fetch(request: Request, env: Env) {
  • Network accessline 28
    const container = env.STATELESS_API.getRandom()     await container.startAndWaitForPorts()     return container.fetch(request)
  • Network accessline 29
    await container.startAndWaitForPorts()     return container.fetch(request)   },
  • Network accessline 30
    return container.fetch(request)
  • Network accessline 40
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 41
    async fetch(request: Request, env: Env) {
  • Network accessline 42
    const container = env.GLOBAL_SERVICE.getByName('singleton')     await container.startAndWaitForPorts()     return container.fetch(request)
  • Network accessline 43
    await container.startAndWaitForPorts()     return container.fetch(request)   },
  • Network accessline 44
    return container.fetch(request)
  • Network accessline 54
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 55
    async fetch(request: Request, env: Env) {
  • Network accessline 61
    // ⚠<U+FE0F> MUST use fetch(), not containerFetch()
  • Network accessline 62
    return container.fetch(request)
  • Network accessline 69
    **⚠<U+FE0F> Critical:** Always use `fetch()` for WebSocket.
  • Network accessline 97
    async fetch(request: Request) {
  • Network accessline 102
    }     })     return super.fetch(request)
  • Network accessline 103
    })     return super.fetch(request)   }
  • Network accessline 104
    return super.fetch(request)
  • Network accessline 139
    async fetch(request: Request) {
  • Network accessline 141
    if (path.startsWith('/grpc')) this.switchPort(8081)     else if (path.startsWith('/metrics')) this.switchPort(9090)     return super.fetch(request)
  • Network accessline 142
    else if (path.startsWith('/metrics')) this.switchPort(9090)     return super.fetch(request)   }
  • Network accessline 143
    return super.fetch(request)
  • Network accessline 163
    const result = await step.do('process', async () => {       return container         .fetch('/process', {
  • Network accessline 164
    return container         .fetch('/process', {           method: 'POST',
  • Network accessline 165
    .fetch('/process', {
  • Network accessline 189
    const response = await container.fetch('/process', {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cron-triggers/README.md

  • Network accessline 69
    npx wrangler dev curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*"
  • Network accessline 70
    curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*"

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cron-triggers/api.md

  • Network accessline 132
    # Trigger any cron curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*"
  • Network accessline 133
    curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*"
  • Network accessline 135
    # Trigger specific cron with custom time curl "http://localhost:8787/__scheduled?cron=0+2+*+*+*&scheduledTime=1704067200000"
  • Network accessline 136
    curl "http://localhost:8787/__scheduled?cron=0+2+*+*+*&scheduledTime=1704067200000"

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cron-triggers/configuration.md

  • Network accessline 119
    curl "https://api.cloudflare.com/client/v4/accounts/{account_id}/workers/scripts/{script_name}/schedules" \
  • Network accessline 126
    curl -X PUT "https://api.cloudflare.com/client/v4/accounts/{account_id}/workers/scripts/{script_name}/schedules" \
  • Network accessline 135
    curl -X PUT "https://api.cloudflare.com/client/v4/accounts/{account_id}/workers/scripts/{script_name}/schedules" \
  • Network accessline 177
    - [crontab.guru](https://crontab.guru/) - Interactive validator

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cron-triggers/gotchas.md

  • Network accessline 61
    # Correct curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*"
  • Network accessline 62
    curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*"
  • Network accessline 64
    # Wrong (will fail) curl "http://localhost:8787/__scheduled?cron=*/5 * * * *"
  • Network accessline 65
    curl "http://localhost:8787/__scheduled?cron=*/5 * * * *"
  • Network accessline 128
    export default {   async fetch(request, env, ctx) {
  • Network accessline 129
    async fetch(request, env, ctx) {
  • Access to secretsline 146
    [Credential-related source omitted]
  • Network accessline 151
    export default {   async fetch(request, env, ctx) {
  • Network accessline 152
    async fetch(request, env, ctx) {
  • Network accessline 202
    - [Cron Triggers Docs](https://developers.cloudflare.com/workers/configuration/cron-triggers/)
  • Network accessline 203
    - [Scheduled Handler API](https://developers.cloudflare.com/workers/runtime-apis/handlers/scheduled/)
  • Network accessline 204
    - [Cloudflare Workflows](https://developers.cloudflare.com/workflows/)
  • Network accessline 205
    - [Workers Limits](https://developers.cloudflare.com/workers/platform/limits/)
  • Network accessline 206
    - [Crontab Guru](https://crontab.guru/) - Validator
  • Network accessline 207
    - [Vitest Pool Workers](https://github.com/cloudflare/workers-sdk/tree/main/fixtures/vitest-pool-workers-examples)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cron-triggers/patterns.md

  • Network accessline 6
    export default {   async scheduled(controller, env, ctx) {     const response = await fetch('https://api.example.com/data', {
  • Network accessline 7
    [Credential-related source omitted]
  • Network accessline 8
    const response = await fetch('https://api.example.com/data', {
  • Access to secretsline 9
    [Credential-related source omitted]
  • Network accessline 48
    await env.REPORTS_BUCKET.put(reportKey, JSON.stringify(report))     ctx.waitUntil(       env.SEND_EMAIL.fetch('https://example.com/send', {
  • Network accessline 49
    ctx.waitUntil(       env.SEND_EMAIL.fetch('https://example.com/send', {         method: 'POST',
  • Network accessline 50
    env.SEND_EMAIL.fetch('https://example.com/send', {
  • Network accessline 53
    to: 'team@example.com',           subject: 'Weekly Report',           reportUrl: `https://reports.example.com/${reportKey}`,
  • Network accessline 54
    subject: 'Weekly Report',           reportUrl: `https://reports.example.com/${reportKey}`,         }),
  • Network accessline 55
    reportUrl: `https://reports.example.com/${reportKey}`,
  • Network accessline 67
    async scheduled(controller, env, ctx) {     const services = [       { name: 'API', url: 'https://api.example.com/health' },
  • Network accessline 68
    const services = [       { name: 'API', url: 'https://api.example.com/health' },       { name: 'CDN', url: 'https://cdn.example.com/health' },
  • Network accessline 69
    { name: 'API', url: 'https://api.example.com/health' },
  • Network accessline 70
    { name: 'CDN', url: 'https://cdn.example.com/health' },
  • Network accessline 74
    const start = Date.now()         try {           const response = await fetch(service.url, { signal: AbortSignal.timeout(5000) })
  • Network accessline 75
    try {           const response = await fetch(service.url, { signal: AbortSignal.timeout(5000) })           return { name: service.name, status: response.ok ? 'up' : 'down', responseTime: Date.now() - start }
  • Network accessline 76
    const response = await fetch(service.url, { signal: AbortSignal.timeout(5000) })
  • Network accessline 85
    if (failures.length > 0)       ctx.waitUntil(         fetch(env.ALERT_WEBHOOK, {
  • Network accessline 86
    ctx.waitUntil(         fetch(env.ALERT_WEBHOOK, {           method: 'POST',
  • Network accessline 87
    fetch(env.ALERT_WEBHOOK, {
  • Network accessline 106
    const results = await Promise.allSettled(       batch.map((item) =>         fetch('https://api.example.com/process', {
  • Network accessline 107
    batch.map((item) =>         fetch('https://api.example.com/process', {           method: 'POST',
  • Network accessline 108
    fetch('https://api.example.com/process', {
  • Access to secretsline 110
    [Credential-related source omitted]
  • Network accessline 155
    console.error('[ERROR]', { ...meta, duration: Date.now() - startTime, error: error.message })       ctx.waitUntil(         fetch(env.ALERT_WEBHOOK, {
  • Network accessline 156
    ctx.waitUntil(         fetch(env.ALERT_WEBHOOK, {           method: 'POST',
  • Network accessline 157
    fetch(env.ALERT_WEBHOOK, {
  • Network accessline 209
    # Test specific cron curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*"
  • Network accessline 210
    curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*"
  • Network accessline 212
    # Test with specific time curl "http://localhost:8787/__scheduled?cron=0+2+*+*+*&scheduledTime=1704067200000"
  • Network accessline 213
    curl "http://localhost:8787/__scheduled?cron=0+2+*+*+*&scheduledTime=1704067200000"

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/d1/api.md

  • Network accessline 134
    // Single query const response = await fetch(
  • Network accessline 135
    const response = await fetch(
  • Network accessline 136
    `https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/d1/database/${DATABASE_ID}/query`,
  • Access to secretsline 140
    [Credential-related source omitted]
  • Network accessline 153
    // Batch queries via HTTP const response = await fetch(
  • Network accessline 154
    const response = await fetch(
  • Network accessline 155
    `https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/d1/database/${DATABASE_ID}/query`,
  • Access to secretsline 159
    [Credential-related source omitted]
  • Network accessline 184
    })   it('queries users', async () => {     expect((await worker.fetch('/users')).status).toBe(200)
  • Network accessline 185
    it('queries users', async () => {     expect((await worker.fetch('/users')).status).toBe(200)   })
  • Network accessline 186
    expect((await worker.fetch('/users')).status).toBe(200)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/d1/configuration.md

  • Network accessline 41
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 42
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Access to secretsline 133
    [Credential-related source omitted]
  • Network accessline 147
    import { users } from './schema' export default {   async fetch(request: Request, env: Env) {
  • Network accessline 148
    export default {   async fetch(request: Request, env: Env) {     const db = drizzle(env.DB)
  • Network accessline 149
    async fetch(request: Request, env: Env) {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/d1/patterns.md

  • Network accessline 104
    // Each tenant gets own database export default {   async fetch(request: Request, env: { [key: `TENANT_${string}`]: D1Database }) {
  • Network accessline 105
    export default {   async fetch(request: Request, env: { [key: `TENANT_${string}`]: D1Database }) {     const tenantId = request.headers.get('X-Tenant-ID')
  • Network accessline 106
    async fetch(request: Request, env: { [key: `TENANT_${string}`]: D1Database }) {
  • Network accessline 159
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 160
    async fetch(request: Request, env: Env) {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ddos/api.md

  • Access to secretsline 32
    [Credential-related source omitted]
  • Network accessline 99
    // Create alert await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/alerting/v3/policies`, {
  • Network accessline 100
    await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/alerting/v3/policies`, {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ddos/patterns.md

  • Network accessline 96
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 97
    async fetch(request: Request, env: Env): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/do-storage/configuration.md

  • Network accessline 61
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 62
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 70
    // Legacy: forward request (still works)     // return stub.fetch(request);
  • Network accessline 71
    // return stub.fetch(request);

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/do-storage/gotchas.md

  • Network accessline 46
    **fetch() breaks input/output gates** → allows request interleaving:
  • Network accessline 49
    // UNSAFE: fetch() allows another request to interleave
  • Network accessline 50
    async unsafe() {   const val = await this.ctx.storage.get("counter");   await fetch("https://api.example.com"); // Gate broken!
  • Network accessline 51
    const val = await this.ctx.storage.get("counter");   await fetch("https://api.example.com"); // Gate broken!   await this.ctx.storage.put("counter", val + 1); // Race condition possible
  • Network accessline 52
    await fetch("https://api.example.com"); // Gate broken!
  • Network accessline 62
    return await this.ctx.blockConcurrencyWhile(async () => {     const val = await this.ctx.storage.get("counter");     await fetch("https://api.example.com");
  • Network accessline 63
    const val = await this.ctx.storage.get("counter");     await fetch("https://api.example.com");     await this.ctx.storage.put("counter", val + 1);
  • Network accessline 64
    await fetch("https://api.example.com");

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/durable-objects/README.md

  • Network accessline 58
    **RPC vs fetch() decision:**
  • Network accessline 61
    ├─ New project + compat ≥2024-04-03 → RPC (type-safe, simpler) ├─ Need HTTP semantics (headers, status) → fetch()
  • Network accessline 62
    ├─ Need HTTP semantics (headers, status) → fetch()
  • Network accessline 63
    ├─ Proxying requests to DO → fetch()
  • Network accessline 64
    └─ Legacy compatibility → fetch()
  • Network accessline 67
    See [Patterns: RPC vs fetch()](./patterns.md) for examples.
  • Access to secretsline 103
    [Credential-related source omitted]
  • Network accessline 116
    // Worker access export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 117
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     const id = env.COUNTER.idFromName('global')
  • Network accessline 118
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 151
    ├─ New project + typed methods → RPC (compat ≥2024-04-03) ├─ Need HTTP semantics → fetch()
  • Network accessline 152
    ├─ Need HTTP semantics → fetch()
  • Network accessline 153
    ├─ Proxying to DO → fetch()
  • Network accessline 154
    └─ Legacy compat → fetch()
  • Network accessline 157
    See [Patterns: RPC vs fetch()](./patterns.md) for examples.
  • Network accessline 179
    **Docs**: https://developers.cloudflare.com/durable-objects/
  • Network accessline 180
    **API Reference**: https://developers.cloudflare.com/durable-objects/api/
  • Network accessline 181
    **Examples**: https://developers.cloudflare.com/durable-objects/examples/

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/durable-objects/api.md

  • Access to secretsline 8
    [Credential-related source omitted]
  • Network accessline 19
    // fetch handler (legacy/HTTP semantics)   async fetch(req: Request): Promise<Response> {
  • Network accessline 20
    async fetch(req: Request): Promise<Response> {
  • Network accessline 152
    async fetch(req: Request): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/durable-objects/configuration.md

  • Access to secretsline 128
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/durable-objects/gotchas.md

  • Network accessline 97
    **Cause:** compatibility_date < 2024-04-03 preventing RPC usage   **Solution:** Update compatibility_date to >= 2024-04-03 or use fetch() instead of RPC
  • Network accessline 98
    **Solution:** Update compatibility_date to >= 2024-04-03 or use fetch() instead of RPC

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/durable-objects/patterns.md

  • Network accessline 14
    ## RPC vs fetch()
  • Network accessline 16
    **RPC** (compat ≥2024-04-03): Type-safe, simpler, default for new projects   **fetch()**: Legacy compat, HTTP semantics, proxying
  • Network accessline 17
    **fetch()**: Legacy compat, HTTP semantics, proxying
  • Network accessline 20
    const count = await stub.increment() // RPC const count = await (await stub.fetch(req)).json() // fetch()
  • Network accessline 21
    const count = await (await stub.fetch(req)).json() // fetch()
  • Network accessline 29
    export default {   async fetch(req: Request, env: Env): Promise<Response> {
  • Network accessline 30
    async fetch(req: Request, env: Env): Promise<Response> {
  • Network accessline 32
    const hash = hashCode(userId) % 100 // 100 shards     const id = env.COUNTER.idFromName(`shard:${hash}`)     return env.COUNTER.get(id).fetch(req)
  • Network accessline 33
    const id = env.COUNTER.idFromName(`shard:${hash}`)     return env.COUNTER.get(id).fetch(req)   },
  • Network accessline 34
    return env.COUNTER.get(id).fetch(req)
  • Network accessline 81
    async fetch(req: Request): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-routing/README.md

  • Access to secretsline 25
    [Credential-related source omitted]
  • Network accessline 87
    - [Cloudflare Docs: Email Routing](https://developers.cloudflare.com/email-routing/)
  • Network accessline 88
    - [Cloudflare Docs: Email Workers](https://developers.cloudflare.com/email-routing/email-workers/)
  • Network accessline 89
    - [postal-mime npm package](https://www.npmjs.com/package/postal-mime)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-routing/api.md

  • Network accessline 132
    export default {   async fetch(request, env, ctx): Promise<Response> {
  • Network accessline 133
    async fetch(request, env, ctx): Promise<Response> {
  • Network accessline 136
    to: [{ name: 'Alice', email: 'alice@example.com' }, 'bob@example.com'],       subject: 'Your order #12345 has shipped',       text: 'Track your package at: https://track.example.com/12345',
  • Network accessline 137
    subject: 'Your order #12345 has shipped',       text: 'Track your package at: https://track.example.com/12345',       html: "<p>Track your package at: <a href='https://track.example.com/12345'>View tracking</a></p>",
  • Network accessline 138
    text: 'Track your package at: https://track.example.com/12345',
  • Network accessline 139
    html: "<p>Track your package at: <a href='https://track.example.com/12345'>View tracking</a></p>",
  • Access to secretsline 145
    [Credential-related source omitted]
  • Network accessline 158
    Base URL: `https://api.cloudflare.com/client/v4`
  • Network accessline 163
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Network accessline 180
    [Credential-related source omitted]
  • Access to secretsline 180
    [Credential-related source omitted]
  • Access to secretsline 181
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-routing/configuration.md

  • Network accessline 52
    # Test with curl curl -X POST 'http://localhost:8787/__email' \
  • Network accessline 53
    curl -X POST 'http://localhost:8787/__email' \
  • Network accessline 75
    [Credential-related source omitted]
  • Access to secretsline 75
    [Credential-related source omitted]
  • Access to secretsline 76
    [Credential-related source omitted]
  • Access to secretsline 93
    [Credential-related source omitted]
  • Access to secretsline 102
    [Credential-related source omitted]
  • Access to secretsline 134
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-routing/gotchas.md

  • Network accessline 127
    curl -X POST 'http://localhost:8787/__email' \

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-routing/patterns.md

  • Access to secretsline 70
    [Credential-related source omitted]
  • Access to secretsline 98
    [Credential-related source omitted]
  • Access to secretsline 152
    [Credential-related source omitted]
  • Access to secretsline 178
    [Credential-related source omitted]
  • Access to secretsline 203
    [Credential-related source omitted]
  • Access to secretsline 225
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-workers/README.md

  • Network accessline 149
    - [Email Routing Documentation](https://developers.cloudflare.com/email-routing/)
  • Network accessline 150
    - [Workers Platform](https://developers.cloudflare.com/workers/)
  • Network accessline 151
    - [Wrangler CLI](https://developers.cloudflare.com/workers/wrangler/)
  • Network accessline 152
    - [postal-mime on npm](https://www.npmjs.com/package/postal-mime)
  • Network accessline 153
    - [mimetext on npm](https://www.npmjs.com/package/mimetext)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-workers/configuration.md

  • Network accessline 16
    "kv_namespaces": [{ "binding": "ARCHIVE", "id": "xxx" }],   "r2_buckets": [{ "binding": "ATTACHMENTS", "bucket_name": "email-attachments" }],   "vars": { "WEBHOOK_URL": "https://hooks.example.com" },
  • Network accessline 17
    "r2_buckets": [{ "binding": "ATTACHMENTS", "bucket_name": "email-attachments" }],   "vars": { "WEBHOOK_URL": "https://hooks.example.com" }, }
  • Network accessline 18
    "vars": { "WEBHOOK_URL": "https://hooks.example.com" },
  • Network accessline 66
    # Test receiving curl --request POST 'http://localhost:8787/cdn-cgi/handler/email' \
  • Network accessline 67
    curl --request POST 'http://localhost:8787/cdn-cgi/handler/email' \
  • Access to secretsline 97
    [Credential-related source omitted]
  • Access to secretsline 98
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-workers/gotchas.md

  • Network accessline 21
    // ❌ Errors dropped silently ctx.waitUntil(fetch(webhookUrl, { method: 'POST', body: data }))
  • Network accessline 22
    ctx.waitUntil(fetch(webhookUrl, { method: 'POST', body: data }))
  • Network accessline 24
    // ✅ Catch and log ctx.waitUntil(   fetch(webhookUrl, { method: 'POST', body: data }).catch((err) =>
  • Network accessline 25
    ctx.waitUntil(   fetch(webhookUrl, { method: 'POST', body: data }).catch((err) =>     env.ERROR_LOG.put(`error:${Date.now()}`, err.message),
  • Network accessline 26
    fetch(webhookUrl, { method: 'POST', body: data }).catch((err) =>

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-workers/patterns.md

  • Network accessline 102
    ctx.waitUntil(   fetch(env.WEBHOOK_URL, {
  • Network accessline 103
    fetch(env.WEBHOOK_URL, {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/hyperdrive/README.md

  • Network accessline 37
    export default {   async fetch(req: Request, env: Env): Promise<Response> {
  • Network accessline 38
    async fetch(req: Request, env: Env): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/hyperdrive/api.md

  • Network accessline 30
    export default {   async fetch(req: Request, env: Env): Promise<Response> {
  • Network accessline 31
    async fetch(req: Request, env: Env): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/hyperdrive/gotchas.md

  • Network accessline 72
    - [Docs](https://developers.cloudflare.com/hyperdrive/)
  • Network accessline 73
    - [Getting Started](https://developers.cloudflare.com/hyperdrive/get-started/)
  • Network accessline 74
    - [Wrangler Reference](https://developers.cloudflare.com/hyperdrive/reference/wrangler-commands/)
  • Network accessline 75
    - [Supported DBs](https://developers.cloudflare.com/hyperdrive/reference/supported-databases-and-features/)
  • Network accessline 76
    - [Discord #hyperdrive](https://discord.cloudflare.com)
  • Network accessline 77
    - [Limit Increase Form](https://forms.gle/ukpeZVLWLnKeixDu7)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/images/README.md

  • Network accessline 64
    - [Official Docs](https://developers.cloudflare.com/images/)
  • Network accessline 65
    - [Workers Examples](https://developers.cloudflare.com/images/tutorials/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/images/api.md

  • Network accessline 55
    curl -X POST https://api.cloudflare.com/client/v4/accounts/{account_id}/images/v1 \
  • Network accessline 70
    https://imagedelivery.net/{hash}/{id}/width=800,height=600,fit=cover,format=avif
  • Network accessline 78
    // 1. Get upload URL (backend) const { result } = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/images/v2/direct_upload`, {
  • Network accessline 79
    const { result } = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/images/v2/direct_upload`, {
  • Network accessline 86
    const formData = new FormData() formData.append('file', file) await fetch(result.uploadURL, { method: 'POST', body: formData })
  • Network accessline 88
    await fetch(result.uploadURL, { method: 'POST', body: formData })

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/images/configuration.md

  • Network accessline 25
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 26
    async fetch(request: Request, env: Env): Promise<Response> {
  • Access to secretsline 43
    [Credential-related source omitted]
  • Network accessline 48
    const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/images/v1`, {
  • Network accessline 76
    const imageUrl = `https://imagedelivery.net/${env.IMAGES_ACCOUNT_HASH}/${imageId}/public`
  • Network accessline 93
    curl -X POST \
  • Network accessline 94
    https://api.cloudflare.com/client/v4/accounts/{account_id}/images/v1/variants \
  • Network accessline 111
    https://imagedelivery.net/{account_hash}/{image_id}/thumbnail
  • Network accessline 155
    [Credential-related source omitted]
  • Network accessline 156
    https://api.cloudflare.com/client/v4/accounts/{account_id}/images/v1
  • Network accessline 162
    [Credential-related source omitted]
  • Access to secretsline 162
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Network accessline 164
    https://api.cloudflare.com/client/v4/accounts/{account_id}/images/v1
  • Network accessline 172
    # Upload with signed URLs required curl -X POST \
  • Network accessline 173
    curl -X POST \
  • Network accessline 174
    https://api.cloudflare.com/client/v4/accounts/{account_id}/images/v1 \
  • Network accessline 190
    return `https://imagedelivery.net/{hash}${path}?exp=${expiry}&sig=${signature}`
  • Access to secretsline 194
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/images/gotchas.md

  • Network accessline 101
    // Test with curl // curl -I "https://imagedelivery.net/{hash}/{id}/width=800,format=avif"
  • Network accessline 102
    // curl -I "https://imagedelivery.net/{hash}/{id}/width=800,format=avif"

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/images/patterns.md

  • Network accessline 15
    <img   src="https://imagedelivery.net/{hash}/{id}/width=800"
  • Network accessline 16
    src="https://imagedelivery.net/{hash}/{id}/width=800"
  • Network accessline 25
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 35
    // Backend: Generate upload URL const response = await fetch(
  • Network accessline 36
    const response = await fetch(
  • Network accessline 37
    `https://api.cloudflare.com/client/v4/accounts/${env.ACCOUNT_ID}/images/v2/direct_upload`,
  • Access to secretsline 40
    [Credential-related source omitted]
  • Network accessline 46
    const formData = new FormData() formData.append('file', file) await fetch(result.uploadURL, { method: 'POST', body: formData })
  • Network accessline 47
    formData.append('file', file) await fetch(result.uploadURL, { method: 'POST', body: formData }) // Use: https://imagedelivery.net/{hash}/${result.id}/public
  • Network accessline 48
    await fetch(result.uploadURL, { method: 'POST', body: formData })
  • Network accessline 49
    // Use: https://imagedelivery.net/{hash}/${result.id}/public
  • Network accessline 55
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 69
    const watermark = await env.ASSETS.fetch(new URL('/watermark.png', request.url))
  • Network accessline 91
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/kv/configuration.md

  • Network accessline 47
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 48
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Access to secretsline 53
    [Credential-related source omitted]
  • Access to secretsline 113
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/kv/patterns.md

  • Network accessline 25
    // L3: Origin (slow)   const origin = await fetch(`https://api.example.com/${key}`).then((r) => r.json())
  • Network accessline 26
    const origin = await fetch(`https://api.example.com/${key}`).then((r) => r.json())
  • Network accessline 48
    const apiData = await getCachedData(env, 'cache:users', () =>   fetch('https://api.example.com/users').then((r) => r.json()),
  • Network accessline 49
    fetch('https://api.example.com/users').then((r) => r.json()),

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/miniflare/README.md

  • Network accessline 78
    script: `     export default {       async fetch(request, env, ctx) {
  • Network accessline 79
    export default {       async fetch(request, env, ctx) {         return new Response("Hello Miniflare!");
  • Network accessline 80
    async fetch(request, env, ctx) {
  • Network accessline 87
    const res = await mf.dispatchFetch('http://localhost:8787/')

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/miniflare/api.md

  • Network accessline 36
    **Fetch (no HTTP server):**
  • Network accessline 39
    const res = await mf.dispatchFetch('http://localhost:8787/path', {
  • Network accessline 49
    const res = await mf.dispatchFetch('http://localhost:8787/', {
  • Access to secretsline 85
    [Credential-related source omitted]
  • Access to secretsline 86
    [Credential-related source omitted]
  • Network accessline 118
    const id = ns.idFromName('test') const stub = ns.get(id) const res = await stub.fetch('http://localhost/')
  • Network accessline 120
    const res = await stub.fetch('http://localhost/')
  • Network accessline 138
    const caches = await mf.getCaches() const defaultCache = caches.default await defaultCache.put('http://example.com', new Response('cached'))
  • Network accessline 140
    await defaultCache.put('http://example.com', new Response('cached'))
  • Network accessline 194
    const mf = new Miniflare({ scriptPath: 'worker.js' }) const url = await mf.ready // Promise<URL> console.log(`Server running at ${url}`) // http://127.0.0.1:8787
  • Network accessline 196
    console.log(`Server running at ${url}`) // http://127.0.0.1:8787
  • Network accessline 198
    // Note: dispatchFetch() waits automatically, no need to await ready const res = await mf.dispatchFetch('http://localhost/') // Works immediately
  • Network accessline 199
    const res = await mf.dispatchFetch('http://localhost/') // Works immediately

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/miniflare/configuration.md

  • Network accessline 30
    'streams_enable_constructors', // Stream constructors   ],   upstream: 'https://example.com', // Fallback for unhandled requests
  • Network accessline 31
    ],   upstream: 'https://example.com', // Fallback for unhandled requests })
  • Network accessline 32
    upstream: 'https://example.com', // Fallback for unhandled requests
  • Network accessline 90
    bindings: {     SECRET_KEY: 'my-secret-value',     API_URL: 'https://api.example.com',
  • Network accessline 91
    SECRET_KEY: 'my-secret-value',     API_URL: 'https://api.example.com',     DEBUG: true,
  • Network accessline 92
    API_URL: 'https://api.example.com',

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/miniflare/gotchas.md

  • Access to secretsline 166
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/miniflare/patterns.md

  • Network accessline 64
    it('handles fetch', async () => {   const res = await SELF.fetch('http://example.com/')
  • Network accessline 65
    const res = await SELF.fetch('http://example.com/')
  • Network accessline 85
    test('fetch', async () => {   const res = await mf.dispatchFetch('http://localhost/')
  • Network accessline 86
    const res = await mf.dispatchFetch('http://localhost/')
  • Network accessline 97
    const ns = await mf.getDurableObjectNamespace('COUNTER') const stub = ns.get(ns.idFromName('test-counter')) await stub.fetch('http://localhost/increment')
  • Network accessline 99
    await stub.fetch('http://localhost/increment')
  • Network accessline 124
    workers: [     { name: 'main', serviceBindings: { API: 'mock-api' }, script: `...` },     { name: 'mock-api', script: `export default { async fetch() { return Response.json({mock: true}); } }` },
  • Network accessline 125
    { name: 'main', serviceBindings: { API: 'mock-api' }, script: `...` },     { name: 'mock-api', script: `export default { async fetch() { return Response.json({mock: true}); } }` },   ],
  • Network accessline 126
    { name: 'mock-api', script: `export default { async fetch() { return Response.json({mock: true}); } }` },
  • Access to secretsline 138
    [Credential-related source omitted]
  • Access to secretsline 141
    [Credential-related source omitted]
  • Network accessline 144
    export default {   async fetch(req: Request, env: Env) {
  • Network accessline 145
    async fetch(req: Request, env: Env) {
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 154
    const res = await mf.dispatchFetch('http://localhost/ws', {
  • Network accessline 178
    // Use dispatchFetch (no port conflicts) await mf.dispatchFetch('http://localhost/')
  • Network accessline 179
    await mf.dispatchFetch('http://localhost/')

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/network-interconnect/README.md

  • Network accessline 30
    - IPv4 /24+ or IPv6 /48+ prefixes - BGP ASN for v1 - See [locations PDF](https://developers.cloudflare.com/network-interconnect/static/cni-locations-2026-01.pdf)
  • Network accessline 32
    - See [locations PDF](https://developers.cloudflare.com/network-interconnect/static/cni-locations-2026-01.pdf)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/network-interconnect/api.md

  • Network accessline 8
    https://api.cloudflare.com/client/v4
  • Network accessline 85
    Rates: `high` | `medium` | `low`. Types: `request` | `reply`. See [Magic Transit docs](https://developers.cloudflare.com/magic-transit/how-to/configure-tunnel-endpoints/#add-tunnels).
  • Access to secretsline 101
    [Credential-related source omitted]
  • Network accessline 136
    // LOA (use fetch) const res = await fetch(`https://api.cloudflare.com/client/v4/accounts/${id}/cni/interconnects/${iconId}/loa`, {
  • Network accessline 137
    const res = await fetch(`https://api.cloudflare.com/client/v4/accounts/${id}/cni/interconnects/${iconId}/loa`, {
  • Access to secretsline 166
    [Credential-related source omitted]
  • Network accessline 181
    # List interconnects curl "https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/cni/interconnects" \
  • Network accessline 182
    [Credential-related source omitted]
  • Access to secretsline 182
    [Credential-related source omitted]
  • Access to secretsline 183
    [Credential-related source omitted]
  • Network accessline 185
    # Create interconnect curl -X POST "https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/cni/interconnects?validate_only=true" \
  • Network accessline 186
    [Credential-related source omitted]
  • Access to secretsline 186
    [Credential-related source omitted]
  • Access to secretsline 187
    [Credential-related source omitted]
  • Network accessline 190
    # LOA PDF curl "https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/cni/interconnects/${ICON_ID}/loa" \
  • Network accessline 191
    [Credential-related source omitted]
  • Access to secretsline 191
    [Credential-related source omitted]
  • Access to secretsline 192
    [Credential-related source omitted]
  • Network accessline 208
    - [API Docs](https://developers.cloudflare.com/api/resources/network_interconnects/)
  • Network accessline 209
    - [TypeScript SDK](https://github.com/cloudflare/cloudflare-typescript)
  • Network accessline 210
    - [Python SDK](https://github.com/cloudflare/cloudflare-python)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/network-interconnect/configuration.md

  • Network accessline 13
    4. **Configure** (Week 3): Both sides configure per doc 5. **Test** (Week 3-4): Ping, verify BGP, check routes 6. **Health checks** (Week 4): Configure [Magic Transit](https://developers.cloudflare.com/magic-transit/how-to/configure-tunnel-
  • Network accessline 14
    5. **Test** (Week 3-4): Ping, verify BGP, check routes 6. **Health checks** (Week 4): Configure [Magic Transit](https://developers.cloudflare.com/magic-transit/how-to/configure-tunnel-endpoints/#add-tunnels) or [Magic WAN](https://developer
  • Network accessline 15
    6. **Health checks** (Week 4): Configure [Magic Transit](https://developers.cloudflare.com/magic-transit/how-to/configure-tunnel-endpoints/#add-tunnels) or [Magic WAN](https://developers.cloudflare.com/magic-wan/configuration/manually/how-t
  • Network accessline 17
    8. **Monitor**: Enable [maintenance notifications](https://developers.cloudflare.com/network-interconnect/monitoring-and-alerts/#enable-cloudflare-status-maintenance-notification)
  • Network accessline 57
    **Post-setup:** Add [static routes](https://developers.cloudflare.com/magic-wan/configuration/manually/how-to/configure-routes/#configure-static-routes) to Magic WAN. Enable [bidirectional health checks](https://developers.cloudflare.com/ma
  • Network accessline 68
    **Routing to GCP:** Add [static routes](https://developers.cloudflare.com/magic-wan/configuration/manually/how-to/configure-routes/#configure-static-routes). BGP routes from GCP Cloud Router **ignored**.
  • Network accessline 70
    **Routing to CF:** Configure [custom learned routes](https://cloud.google.com/network-connectivity/docs/router/how-to/configure-custom-learned-routes) in Cloud Router. Request prefixes from CF account team.

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/network-interconnect/gotchas.md

  • Network accessline 69
    **Cause:** Typo or unsupported facility   **Solution:** Check [locations PDF](https://developers.cloudflare.com/network-interconnect/static/cni-locations-2026-01.pdf) for valid codes
  • Network accessline 70
    **Solution:** Check [locations PDF](https://developers.cloudflare.com/network-interconnect/static/cni-locations-2026-01.pdf) for valid codes
  • Network accessline 109
    **Cause:** BGP routes from GCP Cloud Router **ignored by design**   **Solution:** Use [static routes](https://developers.cloudflare.com/magic-wan/configuration/manually/how-to/configure-routes/#configure-static-routes) in Magic WAN instead
  • Network accessline 110
    **Solution:** Use [static routes](https://developers.cloudflare.com/magic-wan/configuration/manually/how-to/configure-routes/#configure-static-routes) in Magic WAN instead

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/network-interconnect/patterns.md

  • Network accessline 172
    - [Magic Transit Docs](https://developers.cloudflare.com/magic-transit/)
  • Network accessline 173
    - [Magic WAN Docs](https://developers.cloudflare.com/magic-wan/)
  • Network accessline 174
    - [Argo Smart Routing](https://developers.cloudflare.com/argo/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/observability/README.md

  • Network accessline 90
    - [Cloudflare Workers Docs](https://developers.cloudflare.com/workers/)
  • Network accessline 91
    - [Analytics Engine Docs](https://developers.cloudflare.com/analytics/analytics-engine/)
  • Network accessline 92
    - [Workers Traces Docs](https://developers.cloudflare.com/workers/observability/traces/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/observability/api.md

  • Network accessline 5
    **Endpoint**: `https://api.cloudflare.com/client/v4/graphql`
  • Network accessline 36
    **Endpoint**: `https://api.cloudflare.com/client/v4/accounts/{account_id}/analytics_engine/sql`

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/observability/configuration.md

  • Network accessline 62
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 63
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 100
    // Send to external monitoring       ctx.waitUntil(         fetch('https://monitoring.example.com/errors', {
  • Network accessline 101
    ctx.waitUntil(         fetch('https://monitoring.example.com/errors', {           method: 'POST',
  • Network accessline 102
    fetch('https://monitoring.example.com/errors', {
  • Network accessline 127
    curl -X POST "https://api.cloudflare.com/client/v4/accounts/{account_id}/logpush/jobs" \

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/observability/gotchas.md

  • Network accessline 15
    # Test with curl curl https://your-worker.workers.dev
  • Network accessline 16
    curl https://your-worker.workers.dev
  • Network accessline 60
    // Date.now() is coarsened - trace spans are accurate export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 61
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {     // For user-facing timing, Date.now() is fine
  • Network accessline 62
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 101
    // Pass correlationId through headers to downstream services await fetch('https://api.example.com', {
  • Network accessline 102
    await fetch('https://api.example.com', {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/observability/patterns.md

  • Network accessline 22
    const start = Date.now() const response = await fetch(url)
  • Network accessline 23
    const response = await fetch(url)
  • Network accessline 64
    ctx.waitUntil(       fetch('https://logging.example.com/ingest', {
  • Network accessline 65
    fetch('https://logging.example.com/ingest', {
  • Access to secretsline 67
    [Credential-related source omitted]
  • Network accessline 96
    ctx.waitUntil(       fetch('https://api.honeycomb.io/v1/traces', {
  • Network accessline 97
    fetch('https://api.honeycomb.io/v1/traces', {
  • Access to secretsline 99
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages-functions/api.md

  • Access to secretsline 64
    [Credential-related source omitted]
  • Access to secretsline 78
    [Credential-related source omitted]
  • Access to secretsline 90
    [Credential-related source omitted]
  • Network accessline 104
    [Credential-related source omitted]
  • Access to secretsline 104
    [Credential-related source omitted]
  • Network accessline 105
    const stub = ctx.env.COUNTER.get(ctx.env.COUNTER.idFromName('global'))   return stub.fetch(ctx.request) }
  • Network accessline 106
    return stub.fetch(ctx.request)
  • Access to secretsline 116
    [Credential-related source omitted]
  • Access to secretsline 127
    [Credential-related source omitted]
  • Network accessline 129
    [Credential-related source omitted]
  • Access to secretsline 129
    [Credential-related source omitted]
  • Network accessline 131
    return ctx.env.AUTH.fetch(ctx.request)
  • Access to secretsline 134
    [Credential-related source omitted]
  • Network accessline 140
    When using `_worker.js`, access static assets via `env.ASSETS.fetch()`:
  • Network accessline 148
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 149
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 152
    return Response.json({ data: await env.KV.get('key') })     }     return env.ASSETS.fetch(request) // Fallback to static
  • Network accessline 153
    }     return env.ASSETS.fetch(request) // Fallback to static   },
  • Network accessline 154
    return env.ASSETS.fetch(request) // Fallback to static
  • Access to secretsline 156
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages-functions/configuration.md

  • Access to secretsline 15
    [Credential-related source omitted]
  • Access to secretsline 27
    [Credential-related source omitted]
  • Access to secretsline 29
    [Credential-related source omitted]
  • Network accessline 44
    "vars": { "API_URL": "https://api.example.com" },
  • Network accessline 61
    {   "vars": { "API_URL": "http://localhost:8787" },
  • Network accessline 62
    "vars": { "API_URL": "http://localhost:8787" },
  • Network accessline 63
    "env": {     "production": { "vars": { "API_URL": "https://api.example.com" } },   },
  • Network accessline 64
    "production": { "vars": { "API_URL": "https://api.example.com" } },
  • Access to secretsline 80
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages-functions/gotchas.md

  • Access to secretsline 28
    [Credential-related source omitted]
  • Access to secretsline 35
    [Credential-related source omitted]
  • Network accessline 86
    - `export default { fetch(req, env) {} }` → `export function onRequest(ctx) { const { request, env } = ctx; }`
  • Network accessline 87
    - Use `_worker.js` for complex routing: `env.ASSETS.fetch(request)` for static files
  • Network accessline 97
    - [Official Docs](https://developers.cloudflare.com/pages/functions/)
  • Network accessline 98
    - [Workers APIs](https://developers.cloudflare.com/workers/runtime-apis/)
  • Network accessline 99
    - [Examples](https://github.com/cloudflare/pages-example-projects)
  • Network accessline 100
    - [Discord](https://discord.gg/cloudflaredev)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages-functions/patterns.md

  • Access to secretsline 8
    [Credential-related source omitted]
  • Network accessline 13
    Promise.all([       ctx.env.ANALYTICS.writeDataPoint({ event: 'view' }),       fetch('https://webhook.site/...', { method: 'POST' }),
  • Network accessline 14
    ctx.env.ANALYTICS.writeDataPoint({ event: 'view' }),       fetch('https://webhook.site/...', { method: 'POST' }),     ]),
  • Network accessline 15
    fetch('https://webhook.site/...', { method: 'POST' }),
  • Access to secretsline 38
    [Credential-related source omitted]
  • Access to secretsline 63
    [Credential-related source omitted]
  • Network accessline 115
    it('returns JSON', async () => {   const req = new Request('http://localhost/api')
  • Network accessline 116
    const req = new Request('http://localhost/api')
  • Network accessline 135
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 136
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 139
    return Response.json({ data: await env.KV.get('key') })     }     return env.ASSETS.fetch(request) // Static files
  • Network accessline 140
    }     return env.ASSETS.fetch(request) // Static files   },
  • Network accessline 141
    return env.ASSETS.fetch(request) // Static files
  • Access to secretsline 143
    [Credential-related source omitted]
  • Network accessline 148
    **See also:** [api.md](./api.md) for `env.ASSETS.fetch()` | [gotchas.md](./gotchas.md) for debugging

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages/README.md

  • Network accessline 64
    - [Pages Docs](https://developers.cloudflare.com/pages/)
  • Network accessline 65
    - [Functions API](https://developers.cloudflare.com/pages/functions/api-reference/)
  • Network accessline 66
    - [Framework Guides](https://developers.cloudflare.com/pages/framework-guides/)
  • Network accessline 67
    - [Discord #functions](https://discord.com/channels/595317990191398933/910978223968518144)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages/api.md

  • Access to secretsline 26
    [Credential-related source omitted]
  • Access to secretsline 31
    [Credential-related source omitted]
  • Access to secretsline 39
    [Credential-related source omitted]
  • Access to secretsline 113
    [Credential-related source omitted]
  • Network accessline 132
    // functions/_worker.js export default {   async fetch(request, env, ctx) {
  • Network accessline 133
    export default {   async fetch(request, env, ctx) {     const url = new URL(request.url)
  • Network accessline 134
    async fetch(request, env, ctx) {
  • Network accessline 142
    // REQUIRED: Serve static assets     return env.ASSETS.fetch(request)
  • Network accessline 143
    return env.ASSETS.fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages/configuration.md

  • Network accessline 21
    "ai": { "binding": "AI" },   "analytics_engine_datasets": [{ "binding": "ANALYTICS" }],   "vars": { "API_URL": "https://api.example.com", "ENVIRONMENT": "production" },
  • Network accessline 22
    "analytics_engine_datasets": [{ "binding": "ANALYTICS" }],   "vars": { "API_URL": "https://api.example.com", "ENVIRONMENT": "production" },   "env": {
  • Network accessline 23
    "vars": { "API_URL": "https://api.example.com", "ENVIRONMENT": "production" },
  • Network accessline 24
    "env": {     "preview": {       "vars": { "API_URL": "https://staging-api.example.com" },
  • Network accessline 25
    "preview": {       "vars": { "API_URL": "https://staging-api.example.com" },       "kv_namespaces": [{ "binding": "KV", "id": "preview-namespace-id" }],
  • Network accessline 26
    "vars": { "API_URL": "https://staging-api.example.com" },
  • Access to secretsline 56
    [Credential-related source omitted]
  • Network accessline 212
    [Full limits](https://developers.cloudflare.com/pages/platform/limits/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages/gotchas.md

  • Network accessline 11
    **Problem**: Static files not serving   **Causes**: Build output dir misconfigured; Functions catching requests; Advanced mode missing `env.ASSETS.fetch()`
  • Network accessline 12
    **Causes**: Build output dir misconfigured; Functions catching requests; Advanced mode missing `env.ASSETS.fetch()`
  • Network accessline 13
    **Solution**: Verify output dir, add exclusions to `_routes.json`, call `env.ASSETS.fetch()` in `_worker.js`
  • Network accessline 211
    [Full limits](https://developers.cloudflare.com/pages/platform/limits/)
  • Network accessline 215
    1. Check [Pages Docs](https://developers.cloudflare.com/pages/)
  • Network accessline 216
    2. Search [Discord #functions](https://discord.com/channels/595317990191398933/910978223968518144)
  • Network accessline 217
    3. Review [Workers Examples](https://developers.cloudflare.com/workers/examples/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages/patterns.md

  • Access to secretsline 7
    [Credential-related source omitted]
  • Access to secretsline 13
    [Credential-related source omitted]
  • Access to secretsline 27
    [Credential-related source omitted]
  • Access to secretsline 35
    [Credential-related source omitted]
  • Access to secretsline 69
    [Credential-related source omitted]
  • Network accessline 80
    const data = await request.json()   waitUntil(     fetch('https://api.example.com/webhook', {
  • Network accessline 81
    waitUntil(     fetch('https://api.example.com/webhook', {       method: 'POST',
  • Network accessline 82
    fetch('https://api.example.com/webhook', {
  • Access to secretsline 116
    [Credential-related source omitted]
  • Access to secretsline 149
    [Credential-related source omitted]
  • Network accessline 205
    [Framework Guides](https://developers.cloudflare.com/pages/framework-guides/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pipelines/README.md

  • Network accessline 44
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 45
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Access to secretsline 53
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pipelines/api.md

  • Network accessline 15
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 16
    async fetch(request: Request, env: Env): Promise<Response> {
  • Access to secretsline 21
    [Credential-related source omitted]
  • Network accessline 64
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 65
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 95
    https://{stream-id}.ingest.cloudflare.com
  • Network accessline 105
    # ✅ Correct curl -X POST https://{stream-id}.ingest.cloudflare.com \
  • Network accessline 106
    curl -X POST https://{stream-id}.ingest.cloudflare.com \
  • Network accessline 110
    # ❌ Wrong - will fail curl -X POST https://{stream-id}.ingest.cloudflare.com \
  • Network accessline 111
    curl -X POST https://{stream-id}.ingest.cloudflare.com \
  • Network accessline 119
    curl -X POST https://{stream-id}.ingest.cloudflare.com \
  • Network accessline 157
    Full reference: [Pipelines SQL Reference](https://developers.cloudflare.com/pipelines/sql-reference/)
  • Access to secretsline 199
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pipelines/patterns.md

  • Network accessline 6
    export default {   async fetch(request, env, ctx) {
  • Network accessline 7
    async fetch(request, env, ctx) {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pulumi/README.md

  • Access to secretsline 32
    [Credential-related source omitted]
  • Access to secretsline 34
    [Credential-related source omitted]
  • Access to secretsline 36
    [Credential-related source omitted]
  • Access to secretsline 41
    [Credential-related source omitted]
  • Access to secretsline 53
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pulumi/api.md

  • Network accessline 61
    db.id.apply(async (dbId) => {   const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/d1/database/${dbId}/query`, {
  • Network accessline 62
    const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/d1/database/${dbId}/query`, {
  • Network accessline 78
    class D1MigrationProvider implements pulumi.dynamic.ResourceProvider {   async create(inputs: any): Promise<pulumi.dynamic.CreateResult> {     const response = await fetch(
  • Network accessline 79
    async create(inputs: any): Promise<pulumi.dynamic.CreateResult> {     const response = await fetch(       `https://api.cloudflare.com/client/v4/accounts/${inputs.accountId}/d1/database/${inputs.databaseId}/query`,
  • Network accessline 80
    const response = await fetch(
  • Network accessline 81
    `https://api.cloudflare.com/client/v4/accounts/${inputs.accountId}/d1/database/${inputs.databaseId}/query`,
  • Access to secretsline 158
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pulumi/configuration.md

  • Access to secretsline 31
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pulumi/gotchas.md

  • Network accessline 119
    // Worker code export default {   async fetch(request, env) {
  • Network accessline 120
    export default {   async fetch(request, env) {     await env.MY_KV.get('key')
  • Network accessline 121
    async fetch(request, env) {
  • Network accessline 197
    - **Pulumi Registry:** https://www.pulumi.com/registry/packages/cloudflare/
  • Network accessline 198
    - **API Docs:** https://www.pulumi.com/registry/packages/cloudflare/api-docs/
  • Network accessline 199
    - **GitHub:** https://github.com/pulumi/pulumi-cloudflare
  • Network accessline 200
    - **Cloudflare Docs:** https://developers.cloudflare.com/
  • Network accessline 201
    - **Workers Docs:** https://developers.cloudflare.com/workers/

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/queues/api.md

  • Access to secretsline 56
    [Credential-related source omitted]
  • Network accessline 158
    // Pull messages const response = await fetch(
  • Network accessline 159
    const response = await fetch(
  • Network accessline 160
    `https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/queues/${QUEUE_ID}/messages/pull`,
  • Access to secretsline 163
    [Credential-related source omitted]
  • Network accessline 170
    // Acknowledge await fetch(`https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/queues/${QUEUE_ID}/messages/ack`, {
  • Network accessline 171
    await fetch(`https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/queues/${QUEUE_ID}/messages/ack`, {
  • Access to secretsline 173
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/queues/configuration.md

  • Access to secretsline 91
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/queues/patterns.md

  • Network accessline 6
    // Producer: Accept request, queue work export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 7
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     const { userId, reportType } = await request.json()
  • Network accessline 8
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 39
    async queue(batch: MessageBatch, env: Env): Promise<void> {   const logs = batch.messages.map(m => m.body);   await fetch(env.LOG_ENDPOINT, { method: 'POST', body: JSON.stringify({ logs }) });
  • Network accessline 40
    const logs = batch.messages.map(m => m.body);   await fetch(env.LOG_ENDPOINT, { method: 'POST', body: JSON.stringify({ logs }) });   batch.ackAll();
  • Network accessline 41
    await fetch(env.LOG_ENDPOINT, { method: 'POST', body: JSON.stringify({ logs }) });
  • Network accessline 124
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 209
    try {       await stub.fetch(new Request('https://do/process', {
  • Network accessline 210
    await stub.fetch(new Request('https://do/process', {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-data-catalog/README.md

  • Network accessline 155
    - [Cloudflare R2 Data Catalog Docs](https://developers.cloudflare.com/r2/data-catalog/)
  • Network accessline 156
    - [Apache Iceberg Docs](https://iceberg.apache.org/)
  • Network accessline 157
    - [PyIceberg Docs](https://py.iceberg.apache.org/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-data-catalog/api.md

  • Network accessline 3
    R2 Data Catalog exposes standard [Apache Iceberg REST Catalog API](https://github.com/apache/iceberg/blob/main/open-api/rest-catalog-open-api.yaml).

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-data-catalog/configuration.md

  • Network accessline 7
    - Cloudflare account with [R2 subscription](https://developers.cloudflare.com/r2/pricing/)
  • Network accessline 43
    curl -X POST \
  • Network accessline 44
    "https://api.cloudflare.com/client/v4/accounts/<account-id>/r2/buckets/<bucket>/catalog" \
  • Network accessline 128
    # Store credentials in environment variables WAREHOUSE = os.getenv("R2_WAREHOUSE")      # e.g., "my-bucket" CATALOG_URI = os.getenv("R2_CATALOG_URI")  # e.g., "https://abc123.r2.cloudflarestorage.com/iceberg/my-bucket"
  • Network accessline 129
    [Credential-related source omitted]
  • Network accessline 130
    CATALOG_URI = os.getenv("R2_CATALOG_URI")  # e.g., "https://abc123.r2.cloudflarestorage.com/iceberg/my-bucket"
  • Access to secretsline 131
    [Credential-related source omitted]
  • Access to secretsline 179
    [Credential-related source omitted]
  • Access to secretsline 193
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-data-catalog/gotchas.md

  • Network accessline 162
    - [Cloudflare Community](https://community.cloudflare.com/c/developers/workers/40)
  • Network accessline 163
    - [Cloudflare Discord](https://discord.cloudflare.com) - #r2 channel
  • Network accessline 164
    - [PyIceberg GitHub](https://github.com/apache/iceberg-python/issues)
  • Network accessline 165
    - [Apache Iceberg Slack](https://iceberg.apache.org/community/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-data-catalog/patterns.md

  • Access to secretsline 16
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-sql/README.md

  • Access to secretsline 104
    [Credential-related source omitted]
  • Network accessline 135
    - [pipelines](../pipelines/) - Streaming ingestion to Iceberg tables - [r2](../r2/) - R2 object storage fundamentals - [Cloudflare R2 SQL Docs](https://developers.cloudflare.com/r2-sql/)
  • Network accessline 136
    - [r2](../r2/) - R2 object storage fundamentals - [Cloudflare R2 SQL Docs](https://developers.cloudflare.com/r2-sql/) - [R2 SQL Deep Dive Blog](https://blog.cloudflare.com/r2-sql-deep-dive/)
  • Network accessline 137
    - [Cloudflare R2 SQL Docs](https://developers.cloudflare.com/r2-sql/)
  • Network accessline 138
    - [R2 SQL Deep Dive Blog](https://blog.cloudflare.com/r2-sql-deep-dive/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-sql/configuration.md

  • Network accessline 29
    Catalog enabled successfully Warehouse: my-bucket Catalog URI: https://abc123.r2.cloudflarestorage.com/iceberg/my-bucket
  • Network accessline 31
    Catalog URI: https://abc123.r2.cloudflarestorage.com/iceberg/my-bucket
  • Access to secretsline 77
    [Credential-related source omitted]
  • Access to secretsline 83
    [Credential-related source omitted]
  • Network accessline 93
    curl -X POST https://api.cloudflare.com/client/v4/accounts/{account_id}/r2/sql/query \
  • Access to secretsline 126
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-sql/gotchas.md

  • Network accessline 12
    // ❌ This doesn't exist export default {   async fetch(request, env) {
  • Network accessline 13
    export default {   async fetch(request, env) {     const result = await env.R2_SQL.query('SELECT * FROM table') // Not possible
  • Network accessline 14
    async fetch(request, env) {
  • Access to secretsline 104
    [Credential-related source omitted]
  • Access to secretsline 105
    [Credential-related source omitted]
  • Access to secretsline 107
    [Credential-related source omitted]
  • Access to secretsline 108
    [Credential-related source omitted]
  • Access to secretsline 215
    [Credential-related source omitted]
  • Network accessline 226
    - [patterns.md](patterns.md) - Query optimization - [configuration.md](configuration.md) - Setup - [Cloudflare R2 SQL Docs](https://developers.cloudflare.com/r2-sql/)
  • Network accessline 228
    - [Cloudflare R2 SQL Docs](https://developers.cloudflare.com/r2-sql/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-sql/patterns.md

  • Network accessline 31
    curl -X POST https://api.cloudflare.com/client/v4/accounts/{account_id}/r2/sql/query \
  • Network accessline 63
    # Send data to pipeline curl -X POST https://{stream-id}.ingest.cloudflare.com \
  • Network accessline 64
    curl -X POST https://{stream-id}.ingest.cloudflare.com \

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2/api.md

  • Network accessline 99
    const s3 = new S3Client({   region: 'auto',   endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
  • Network accessline 100
    region: 'auto',   endpoint: `https://${accountId}.r2.cloudflarestorage.com`,   credentials: { accessKeyId: env.R2_ACCESS_KEY_ID, secretAccessKey: env.R2_SECRET_ACCESS_KEY },
  • Network accessline 101
    endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
  • Access to secretsline 102
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2/configuration.md

  • Network accessline 25
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 26
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 38
    const s3 = new S3Client({   region: 'auto',   endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
  • Network accessline 39
    region: 'auto',   endpoint: `https://${accountId}.r2.cloudflarestorage.com`,   credentials: {
  • Network accessline 40
    endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
  • Access to secretsline 43
    [Credential-related source omitted]
  • Network accessline 73
    const s3 = new S3Client({   region: 'auto',   endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
  • Network accessline 74
    region: 'auto',   endpoint: `https://${accountId}.r2.cloudflarestorage.com`,   credentials: {
  • Network accessline 75
    endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
  • Access to secretsline 78
    [Credential-related source omitted]
  • Network accessline 86
    CORSRules: [         {           AllowedOrigins: ['https://example.com'],
  • Network accessline 87
    {           AllowedOrigins: ['https://example.com'],           AllowedMethods: ['GET', 'PUT', 'HEAD'],
  • Network accessline 88
    AllowedOrigins: ['https://example.com'],

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2/gotchas.md

  • Network accessline 82
    // ❌ WRONG: Streaming unknown length fails silently const response = await fetch(url)
  • Network accessline 83
    const response = await fetch(url)
  • Network accessline 103
    // ❌ WRONG: Missing region breaks ALL S3 SDK calls const s3 = new S3Client({   endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
  • Network accessline 104
    const s3 = new S3Client({   endpoint: `https://${accountId}.r2.cloudflarestorage.com`,   credentials: { ... }
  • Network accessline 105
    endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
  • Network accessline 110
    const s3 = new S3Client({   region: 'auto', // REQUIRED   endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
  • Network accessline 111
    region: 'auto', // REQUIRED   endpoint: `https://${accountId}.r2.cloudflarestorage.com`,   credentials: { ... }
  • Network accessline 112
    endpoint: `https://${accountId}.r2.cloudflarestorage.com`,

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2/patterns.md

  • Network accessline 111
    const s3 = new S3Client({   region: 'auto',   endpoint: `https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com`,
  • Network accessline 112
    region: 'auto',   endpoint: `https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com`,   credentials: { accessKeyId: env.R2_ACCESS_KEY_ID, secretAccessKey: env.R2_SECRET_ACCESS_KEY },
  • Network accessline 113
    endpoint: `https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com`,
  • Access to secretsline 114
    [Credential-related source omitted]
  • Network accessline 120
    // Client: Upload directly const { uploadUrl } = await fetch('/api/upload-url').then((r) => r.json())
  • Network accessline 121
    const { uploadUrl } = await fetch('/api/upload-url').then((r) => r.json())
  • Network accessline 122
    await fetch(uploadUrl, { method: 'PUT', body: file })
  • Network accessline 128
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 129
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 161
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 162
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 193
    Enable r2.dev in dashboard for simple public access: `https://pub-${hashId}.r2.dev/${key}`
  • Network accessline 194
    Or add custom domain via dashboard: `https://files.example.com/${key}`

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtime-sfu/README.md

  • Network accessline 56
    Dashboard: https://dash.cloudflare.com/?to=/:account/calls
  • Network accessline 62
    - [Orange Meets Demo](https://demo.orange.cloudflare.dev/)
  • Network accessline 63
    - [Orange Source](https://github.com/cloudflare/orange)
  • Network accessline 64
    - [Calls Examples](https://github.com/cloudflare/calls-examples)
  • Network accessline 65
    - [API Reference](https://developers.cloudflare.com/api/resources/calls/)
  • Network accessline 66
    - [RealtimeKit Docs](https://developers.cloudflare.com/workers-ai/realtimekit/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtime-sfu/api.md

  • Network accessline 6
    [Credential-related source omitted]
  • Access to secretsline 6
    [Credential-related source omitted]
  • Access to secretsline 7
    [Credential-related source omitted]
  • Network accessline 109
    // 4. Send to backend → Cloudflare API const response = await fetch('/api/new-session', {
  • Network accessline 110
    const response = await fetch('/api/new-session', {
  • Network accessline 126
    const res = await fetch(`/api/sessions/${sessionId}/tracks`, {
  • Network accessline 142
    const res = await fetch(`/api/sessions/${sessionId}/tracks`, {
  • Network accessline 155
    await fetch(`/api/sessions/${sessionId}/renegotiate`, {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtime-sfu/configuration.md

  • Network accessline 5
    1. Navigate to https://dash.cloudflare.com/?to=/:account/calls
  • Network accessline 113
    async fetch(req: Request) {
  • Access to secretsline 138
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtime-sfu/gotchas.md

  • Network accessline 47
    // Send to backend → Cloudflare API     await fetch(`/api/sessions/${sessionId}/renegotiate`, {
  • Network accessline 48
    await fetch(`/api/sessions/${sessionId}/renegotiate`, {
  • Network accessline 88
    for (let i = 0; i < maxRetries; i++) {     try {       const res = await fetch(url, options)
  • Network accessline 89
    try {       const res = await fetch(url, options)       if (res.ok) return res
  • Network accessline 90
    const res = await fetch(url, options)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtime-sfu/patterns.md

  • Network accessline 76
    app.post('/api/new-session', async (req, res) => {   const r = await fetch(`${CALLS_API}/apps/${process.env.CALLS_APP_ID}/sessions/new`, {
  • Network accessline 77
    const r = await fetch(`${CALLS_API}/apps/${process.env.CALLS_APP_ID}/sessions/new`, {
  • Access to secretsline 79
    [Credential-related source omitted]
  • Access to secretsline 85
    [Credential-related source omitted]
  • Network accessline 142
    toAdd.forEach(async (id) => {     await fetch(`/api/subscribe`, { method: 'POST', body: JSON.stringify({ trackId: id }) })
  • Network accessline 143
    await fetch(`/api/subscribe`, { method: 'POST', body: JSON.stringify({ trackId: id }) })

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtimekit/README.md

  • Network accessline 26
    # Create app curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/apps' \
  • Network accessline 27
    curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/apps' \
  • Network accessline 31
    # Create meeting curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/meetings' \
  • Network accessline 32
    curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/meetings' \
  • Network accessline 36
    # Add participant curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/meetings/<meeting_id>/participants' \
  • Network accessline 37
    curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/meetings/<meeting_id>/participants' \
  • Access to secretsline 51
    [Credential-related source omitted]
  • Network accessline 115
    - **Official Docs**: https://developers.cloudflare.com/realtime/realtimekit/
  • Network accessline 116
    - **API Reference**: https://developers.cloudflare.com/api/resources/realtime_kit/
  • Network accessline 117
    - **Examples**: https://github.com/cloudflare/realtimekit-web-examples
  • Network accessline 118
    - **Dashboard**: https://dash.cloudflare.com/?to=/:account/realtime/kit

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtimekit/api.md

  • Network accessline 144
    Base: `https://api.cloudflare.com/client/v4/accounts/{account_id}/realtime/kit/{app_id}`
  • Network accessline 213
    GET    /webhooks                    # List all POST   /webhooks                    # Create: {"url": "https://...", "events": ["session.started", "session.ended"]}
  • Network accessline 214
    POST   /webhooks                    # Create: {"url": "https://...", "events": ["session.started", "session.ended"]}

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtimekit/configuration.md

  • Network accessline 47
    <script   type="module"   src="https://cdn.jsdelivr.net/npm/@cloudflare/realtimekit-ui/dist/realtimekit-ui/realtimekit-ui.esm.js"
  • Network accessline 48
    type="module"   src="https://cdn.jsdelivr.net/npm/@cloudflare/realtimekit-ui/dist/realtimekit-ui/realtimekit-ui.esm.js" ></script>
  • Network accessline 49
    src="https://cdn.jsdelivr.net/npm/@cloudflare/realtimekit-ui/dist/realtimekit-ui/realtimekit-ui.esm.js"
  • Network accessline 80
    **Dashboard**: https://dash.cloudflare.com/?to=/:account/realtime/kit
  • Network accessline 85
    curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/apps' \
  • Network accessline 96
    curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/presets' \
  • Network accessline 175
    theme: 'dark'  // 'light' | 'dark'   },   logo: { url: 'https://example.com/logo.png', altText: 'Company' }
  • Network accessline 176
    },   logo: { url: 'https://example.com/logo.png', altText: 'Company' } };
  • Network accessline 177
    logo: { url: 'https://example.com/logo.png', altText: 'Company' }

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtimekit/gotchas.md

  • Network accessline 82
    // Generate token when user clicks "Join" near scheduled time const response = await fetch('/api/join-meeting', {
  • Network accessline 83
    const response = await fetch('/api/join-meeting', {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtimekit/patterns.md

  • Network accessline 14
    // HTML/Web Components <script type="module" src="https://cdn.jsdelivr.net/npm/@cloudflare/realtimekit-ui/dist/realtimekit-ui/realtimekit-ui.esm.js"></script>
  • Network accessline 15
    <script type="module" src="https://cdn.jsdelivr.net/npm/@cloudflare/realtimekit-ui/dist/realtimekit-ui/realtimekit-ui.esm.js"></script>
  • Network accessline 44
    **See full catalog**: https://docs.realtime.cloudflare.com/ui-kit
  • Network accessline 123
    // Approve from waitlist (backend only) await fetch(
  • Network accessline 124
    await fetch(
  • Network accessline 125
    `https://api.cloudflare.com/client/v4/accounts/${accountId}/realtime/kit/${appId}/meetings/${meetingId}/active-session/waitlist/approve`,
  • Network accessline 189
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 190
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 193
    if (url.pathname === '/api/join-meeting') {       const { meetingId, userName, presetName } = await request.json()       const response = await fetch(
  • Network accessline 194
    const { meetingId, userName, presetName } = await request.json()       const response = await fetch(         `https://api.cloudflare.com/client/v4/accounts/${env.CLOUDFLARE_ACCOUNT_ID}/realtime/kit/${env.REALTIMEKIT_APP_ID}/meetings/${meeti
  • Network accessline 195
    const response = await fetch(
  • Network accessline 196
    `https://api.cloudflare.com/client/v4/accounts/${env.CLOUDFLARE_ACCOUNT_ID}/realtime/kit/${env.REALTIMEKIT_APP_ID}/meetings/${meetingId}/participants`,
  • Access to secretsline 199
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/sandbox/README.md

  • Network accessline 22
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 23
    async fetch(request: Request, env: Env): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/sandbox/api.md

  • Access to secretsline 13
    [Credential-related source omitted]
  • Network accessline 123
    // Proxy WebSocket to sandbox service export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 124
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     const proxyResponse = await proxyToSandbox(request, env)
  • Network accessline 125
    async fetch(request: Request, env: Env): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/sandbox/configuration.md

  • Network accessline 78
    "vars": {     "ENVIRONMENT": "production",     "API_URL": "https://api.example.com",
  • Network accessline 79
    "ENVIRONMENT": "production",     "API_URL": "https://api.example.com",   },
  • Network accessline 80
    "API_URL": "https://api.example.com",
  • Access to secretsline 94
    [Credential-related source omitted]
  • Access to secretsline 96
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/sandbox/gotchas.md

  • Access to secretsline 153
    [Credential-related source omitted]
  • Access to secretsline 157
    [Credential-related source omitted]
  • Network accessline 166
    https://8080-sandbox-abc123def456.yourdomain.com
  • Dangerous shell operationline 182
    | exec()                 | 120s            | `timeout` option              |
  • Network accessline 193
    See: https://developers.cloudflare.com/sandbox/guides/production-deployment/
  • Network accessline 197
    - [Official Docs](https://developers.cloudflare.com/sandbox/)
  • Network accessline 198
    - [API Reference](https://developers.cloudflare.com/sandbox/api/)
  • Network accessline 199
    - [Examples](https://github.com/cloudflare/sandbox-sdk/tree/main/examples)
  • Network accessline 200
    - [npm Package](https://www.npmjs.com/package/@cloudflare/sandbox)
  • Network accessline 201
    - [Discord Support](https://discord.cloudflare.com)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/sandbox/patterns.md

  • Network accessline 6
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 7
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 32
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 33
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 39
    if (request.url.endsWith('/start')) {       await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh')
  • Dangerous shell operationline 40
    await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh')
  • Network accessline 40
    await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh')
  • Network accessline 57
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 58
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 88
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 89
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 108
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 109
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 131
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 132
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 162
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 163
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 190
    // Clone repo await sandbox.exec('git clone https://github.com/user/repo.git /workspace/repo')
  • Network accessline 191
    await sandbox.exec('git clone https://github.com/user/repo.git /workspace/repo')
  • Network accessline 193
    // Authenticated (use env secrets) await sandbox.exec(`git clone https://${env.GITHUB_TOKEN}@github.com/user/repo.git`)
  • Network accessline 194
    [Credential-related source omitted]
  • Access to secretsline 194
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/secrets-store/api.md

  • Access to secretsline 13
    [Credential-related source omitted]
  • Network accessline 16
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 17
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 18
    [Credential-related source omitted]
  • Access to secretsline 18
    [Credential-related source omitted]
  • Network accessline 19
    return fetch('https://api.example.com', {
  • Network accessline 29
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 30
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 31
    [Credential-related source omitted]
  • Network accessline 32
    [Credential-related source omitted]
  • Access to secretsline 32
    [Credential-related source omitted]
  • Network accessline 33
    return fetch('https://api.example.com', {
  • Access to secretsline 48
    [Credential-related source omitted]
  • Access to secretsline 51
    [Credential-related source omitted]
  • Access to secretsline 54
    [Credential-related source omitted]
  • Access to secretsline 57
    [Credential-related source omitted]
  • Network accessline 62
    Base: `https://api.cloudflare.com/client/v4`
  • Network accessline 67
    [Credential-related source omitted]
  • Access to secretsline 67
    [Credential-related source omitted]
  • Network accessline 68
    https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/secrets_store/stores
  • Access to secretsline 162
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/secrets-store/configuration.md

  • Access to secretsline 13
    [Credential-related source omitted]
  • Access to secretsline 15
    [Credential-related source omitted]
  • Access to secretsline 25
    [Credential-related source omitted]
  • Access to secretsline 27
    [Credential-related source omitted]
  • Access to secretsline 46
    [Credential-related source omitted]
  • Access to secretsline 48
    [Credential-related source omitted]
  • Access to secretsline 55
    [Credential-related source omitted]
  • Access to secretsline 57
    [Credential-related source omitted]
  • Access to secretsline 70
    [Credential-related source omitted]
  • Access to secretsline 72
    [Credential-related source omitted]
  • Access to secretsline 76
    [Credential-related source omitted]
  • Access to secretsline 78
    [Credential-related source omitted]
  • Access to secretsline 131
    [Credential-related source omitted]
  • Access to secretsline 134
    [Credential-related source omitted]
  • Access to secretsline 167
    [Credential-related source omitted]
  • Access to secretsline 169
    [Credential-related source omitted]
  • Access to secretsline 179
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/secrets-store/gotchas.md

  • Access to secretsline 12
    [Credential-related source omitted]
  • Access to secretsline 21
    [Credential-related source omitted]
  • Access to secretsline 65
    [Credential-related source omitted]
  • Access to secretsline 70
    [Credential-related source omitted]
  • Access to secretsline 75
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/secrets-store/patterns.md

  • Network accessline 13
    [Credential-related source omitted]
  • Network accessline 14
    [Credential-related source omitted]
  • Network accessline 17
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 18
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 19
    [Credential-related source omitted]
  • Access to secretsline 19
    [Credential-related source omitted]
  • Network accessline 21
    // Fallback during rotation     if (!resp.ok && env.FALLBACK_KEY) {       resp = await fetchWithAuth('https://api.example.com', await env.FALLBACK_KEY.get())
  • Network accessline 22
    [Credential-related source omitted]
  • Access to secretsline 22
    [Credential-related source omitted]
  • Network accessline 23
    [Credential-related source omitted]
  • Access to secretsline 23
    [Credential-related source omitted]
  • Network accessline 53
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 54
    async fetch(request: Request, env: Env): Promise<Response> {
  • Access to secretsline 55
    [Credential-related source omitted]
  • Network accessline 79
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 80
    async fetch(request: Request, env: Env): Promise<Response> {
  • Access to secretsline 81
    [Credential-related source omitted]
  • Network accessline 92
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext) {
  • Network accessline 93
    async fetch(request: Request, env: Env, ctx: ExecutionContext) {
  • Network accessline 95
    [Credential-related source omitted]
  • Network accessline 96
    [Credential-related source omitted]
  • Access to secretsline 96
    [Credential-related source omitted]
  • Network accessline 97
    const resp = await fetch('https://api.example.com', {
  • Network accessline 101
    ctx.waitUntil(         fetch('https://log.example.com/log', {
  • Network accessline 102
    fetch('https://log.example.com/log', {
  • Access to secretsline 106
    [Credential-related source omitted]
  • Network accessline 114
    } catch (error) {       ctx.waitUntil(         fetch('https://log.example.com/log', {
  • Network accessline 115
    ctx.waitUntil(         fetch('https://log.example.com/log', {           method: 'POST',
  • Network accessline 116
    fetch('https://log.example.com/log', {
  • Access to secretsline 120
    [Credential-related source omitted]
  • Access to secretsline 137
    [Credential-related source omitted]
  • Access to secretsline 138
    [Credential-related source omitted]
  • Access to secretsline 139
    [Credential-related source omitted]
  • Access to secretsline 141
    [Credential-related source omitted]
  • Network accessline 168
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 169
    async fetch(request: Request, env: Env): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/smart-placement/README.md

  • Network accessline 105
    [Credential-related source omitted]
  • Network accessline 106
    [Credential-related source omitted]
  • Network accessline 107
    https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/workers/services/$WORKER_NAME \

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/smart-placement/api.md

  • Network accessline 8
    curl -X GET "https://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/workers/services/{WORKER_NAME}" \
  • Network accessline 73
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 74
    async fetch(request: Request, env: Env): Promise<Response> {
  • Access to secretsline 87
    [Credential-related source omitted]
  • Network accessline 139
    [Credential-related source omitted]
  • Network accessline 140
    [Credential-related source omitted]
  • Network accessline 141
    https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/workers/services/$WORKER_NAME \
  • Network accessline 180
    // Example Worker with Service Binding export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 181
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     // Forward to backend Worker with Smart Placement enabled
  • Network accessline 182
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 183
    // Forward to backend Worker with Smart Placement enabled     const response = await env.BACKEND_SERVICE.fetch(request)     return response
  • Network accessline 184
    const response = await env.BACKEND_SERVICE.fetch(request)
  • Access to secretsline 187
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/smart-placement/configuration.md

  • Network accessline 87
    // ✅ Smart Placement affects this: export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 88
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     // This runs close to backend when Smart Placement enabled
  • Network accessline 89
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 148
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 149
    async fetch(request: Request, env: Env): Promise<Response> {
  • Access to secretsline 153
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/smart-placement/gotchas.md

  • Network accessline 137
    // ✅ Fetch - Smart Placement WORKS export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 138
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     // Runs close to DATABASE when Smart Placement enabled
  • Network accessline 139
    async fetch(request: Request, env: Env): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/smart-placement/patterns.md

  • Network accessline 6
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 7
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 30
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 31
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 32
    if (new URL(request.url).pathname.startsWith('/api/')) {       return env.BACKEND.fetch(request) // Forward to backend     }
  • Network accessline 33
    return env.BACKEND.fetch(request) // Forward to backend
  • Network accessline 44
    export default {   async fetch(request: Request, env: BackendEnv): Promise<Response> {
  • Network accessline 45
    async fetch(request: Request, env: BackendEnv): Promise<Response> {
  • Network accessline 65
    // ✅ Fetch - Smart Placement WORKS export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 66
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     // Runs close to DATABASE when Smart Placement enabled
  • Network accessline 67
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 78
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 79
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 80
    const apiUrl = 'https://api.partner.com'
  • Access to secretsline 81
    [Credential-related source omitted]
  • Network accessline 83
    const [profile, transactions] = await Promise.all([       fetch(`${apiUrl}/profile`, { headers }),
  • Network accessline 84
    fetch(`${apiUrl}/profile`, { headers }),
  • Network accessline 85
    fetch(`${apiUrl}/transactions`, { headers }),
  • Network accessline 99
    // Frontend (edge) - auth/routing close to user export default {   async fetch(request: Request, env: Env) {
  • Network accessline 100
    export default {   async fetch(request: Request, env: Env) {     if (!request.headers.get('Authorization')) {
  • Network accessline 101
    async fetch(request: Request, env: Env) {
  • Network accessline 103
    return new Response('Unauthorized', { status: 401 })     }     const data = await env.BACKEND.fetch(request)
  • Network accessline 104
    }     const data = await env.BACKEND.fetch(request)     return new Response(renderPage(await data.json()), {
  • Network accessline 105
    const data = await env.BACKEND.fetch(request)
  • Network accessline 112
    // Backend (Smart Placement) - DB operations close to data export default {   async fetch(request: Request, env: Env) {
  • Network accessline 113
    export default {   async fetch(request: Request, env: Env) {     const data = await env.DATABASE.prepare('SELECT * FROM pages WHERE id = ?').bind(pageId).first()
  • Network accessline 114
    async fetch(request: Request, env: Env) {
  • Network accessline 130
    // Worker with Smart Placement - aggregates data from multiple DOs export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 131
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     const userId = new URL(request.url).searchParams.get('user')
  • Network accessline 132
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 140
    // Fetch from multiple DOs     const [userData, analyticsData] = await Promise.all([       userDO.fetch(new Request('https://do/profile')),
  • Network accessline 141
    const [userData, analyticsData] = await Promise.all([       userDO.fetch(new Request('https://do/profile')),       analyticsDO.fetch(new Request('https://do/stats')),
  • Network accessline 142
    userDO.fetch(new Request('https://do/profile')),
  • Network accessline 143
    analyticsDO.fetch(new Request('https://do/stats')),

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/snippets/README.md

  • Network accessline 58
    // Snippet: Add security headers export default {   async fetch(request) {
  • Network accessline 59
    export default {   async fetch(request) {     const response = await fetch(request)
  • Network accessline 60
    async fetch(request) {
  • Network accessline 61
    const response = await fetch(request)
  • Network accessline 74
    - [Cloudflare Docs](https://developers.cloudflare.com/rules/snippets/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/snippets/api.md

  • Network accessline 96
    // Redirect Response.redirect('https://example.com', 301) // or 302
  • Network accessline 97
    Response.redirect('https://example.com', 301) // or 302
  • Network accessline 186
    - `fetch()` - HTTP requests (2-5 subrequests per plan)
  • Network accessline 200
    - `HTMLRewriter` - HTML parsing (use Workers) - `import` statements - No module imports - `addEventListener` - Use `export default { async fetch() {}` pattern
  • Network accessline 202
    - `addEventListener` - Use `export default { async fetch() {}` pattern
  • Network accessline 207
    export default {   async fetch(request) {
  • Network accessline 208
    async fetch(request) {
  • Network accessline 209
    // Your logic here     const response = await fetch(request)     return response // or modified response
  • Network accessline 210
    const response = await fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/snippets/configuration.md

  • Network accessline 26
    # Create/update snippet curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/snippets/$SNIPPET_NAME" \
  • Network accessline 27
    [Credential-related source omitted]
  • Access to secretsline 27
    [Credential-related source omitted]
  • Access to secretsline 29
    [Credential-related source omitted]
  • Network accessline 33
    # Create snippet rule curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/snippets/snippet_rules" \
  • Network accessline 34
    [Credential-related source omitted]
  • Access to secretsline 34
    [Credential-related source omitted]
  • Access to secretsline 36
    [Credential-related source omitted]
  • Network accessline 49
    # List snippets curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/snippets" \
  • Network accessline 50
    [Credential-related source omitted]
  • Access to secretsline 50
    [Credential-related source omitted]
  • Access to secretsline 51
    [Credential-related source omitted]
  • Network accessline 53
    # Delete snippet curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/snippets/$SNIPPET_NAME" \
  • Network accessline 54
    [Credential-related source omitted]
  • Access to secretsline 54
    [Credential-related source omitted]
  • Access to secretsline 56
    [Credential-related source omitted]
  • Network accessline 229
    # Create token at: https://dash.cloudflare.com/profile/api-tokens
  • Access to secretsline 231
    [Credential-related source omitted]
  • Access to secretsline 238
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/snippets/gotchas.md

  • Network accessline 10
    try {   return await fetch(request)
  • Network accessline 11
    return await fetch(request)
  • Network accessline 23
    Call `fetch(request)` exactly once:
  • Network accessline 26
    // ❌ Multiple origin fetches const r1 = await fetch(request)
  • Network accessline 27
    const r1 = await fetch(request)
  • Network accessline 28
    const r2 = await fetch(request)
  • Network accessline 30
    const response = await fetch(request)
  • Network accessline 77
    curl -H "X-Test: true" https://example.com -v
  • Network accessline 82
    **✅ Available:** `fetch()`, `Request`, `Response`, `Headers`, `URL`, `crypto.subtle`, `crypto.randomUUID()`, `atob()`/`btoa()`, `JSON`
  • Network accessline 99
    | Header set  | <0.1ms  | | URL parsing | <0.2ms  | | fetch()     | 1-3ms   |
  • Network accessline 100
    | URL parsing | <0.2ms  | | fetch()     | 1-3ms   | | SHA-256     | 0.5-1ms |
  • Network accessline 101
    | fetch()     | 1-3ms   |

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/snippets/patterns.md

  • Network accessline 6
    export default {   async fetch(request) {
  • Network accessline 7
    async fetch(request) {
  • Network accessline 8
    const response = await fetch(request)
  • Network accessline 23
    export default {   async fetch(request) {
  • Network accessline 24
    async fetch(request) {
  • Network accessline 29
    return Response.redirect(url.toString(), 302)     }     return fetch(request)
  • Network accessline 30
    }     return fetch(request)   },
  • Network accessline 31
    return fetch(request)
  • Network accessline 39
    export default {   async fetch(request) {
  • Network accessline 40
    async fetch(request) {
  • Network accessline 44
    const req = new Request(request)     req.headers.set('X-Variant', variant)     const response = await fetch(req)
  • Network accessline 46
    const response = await fetch(req)
  • Network accessline 61
    export default {   async fetch(request) {
  • Network accessline 62
    async fetch(request) {
  • Network accessline 63
    const botScore = request.cf.botManagement?.score     if (botScore && botScore < 30) return new Response('Denied', { status: 403 })     return fetch(request)
  • Network accessline 64
    if (botScore && botScore < 30) return new Response('Denied', { status: 403 })     return fetch(request)   },
  • Network accessline 65
    return fetch(request)
  • Network accessline 75
    export default {   async fetch(request) {
  • Network accessline 76
    async fetch(request) {
  • Network accessline 79
    req.headers.set('X-Internal-Auth', 'secret_token')       req.headers.delete('Authorization')       return fetch(req)
  • Network accessline 80
    req.headers.delete('Authorization')       return fetch(req)     }
  • Network accessline 81
    return fetch(req)
  • Network accessline 82
    }     return fetch(request)   },
  • Network accessline 83
    return fetch(request)
  • Network accessline 91
    export default {   async fetch(request) {
  • Network accessline 92
    async fetch(request) {
  • Network accessline 101
    })     }     const response = await fetch(request)
  • Network accessline 102
    }     const response = await fetch(request)     const newResponse = new Response(response.body, response)
  • Network accessline 103
    const response = await fetch(request)
  • Network accessline 114
    export default {   async fetch(request) {
  • Network accessline 115
    async fetch(request) {
  • Network accessline 116
    if (request.headers.get('X-Bypass-Token') === 'admin') return fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/spectrum/README.md

  • Network accessline 24
    1. **Create/manage Spectrum app**    - Via Dashboard → See [Cloudflare Dashboard](https://dash.cloudflare.com)
  • Network accessline 25
    - Via Dashboard → See [Cloudflare Dashboard](https://dash.cloudflare.com)
  • Network accessline 52
    - [Cloudflare Docs](https://developers.cloudflare.com/spectrum/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/spectrum/api.md

  • Access to secretsline 66
    [Credential-related source omitted]
  • Network accessline 177
    [Credential-related source omitted]
  • Access to secretsline 177
    [Credential-related source omitted]
  • Access to secretsline 178
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/spectrum/gotchas.md

  • Network accessline 15
    # Test connectivity nc -zv app.example.com 22
  • Network accessline 16
    nc -zv app.example.com 22

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/static-assets/README.md

  • Network accessline 20
    // src/index.ts export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 21
    export default {   async fetch(request: Request, env: Env): Promise<Response> {     return env.ASSETS.fetch(request)
  • Network accessline 22
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 23
    return env.ASSETS.fetch(request)
  • Network accessline 63
    - [Cloudflare Workers Docs](https://developers.cloudflare.com/workers/)
  • Network accessline 64
    - [Static Assets Docs](https://developers.cloudflare.com/workers/static-assets/)
  • Network accessline 65
    - [Cloudflare Pages](https://developers.cloudflare.com/pages/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/static-assets/api.md

  • Network accessline 14
    interface Fetcher {   fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response>
  • Network accessline 15
    fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response>
  • Network accessline 22
    // 1. Forward entire request await env.ASSETS.fetch(request)
  • Network accessline 23
    await env.ASSETS.fetch(request)
  • Network accessline 25
    // 2. String path (hostname ignored, only path matters) await env.ASSETS.fetch('https://any-host/path/to/asset.png')
  • Network accessline 26
    await env.ASSETS.fetch('https://any-host/path/to/asset.png')
  • Network accessline 28
    // 3. URL object await env.ASSETS.fetch(new URL('/index.html', request.url))
  • Network accessline 29
    await env.ASSETS.fetch(new URL('/index.html', request.url))
  • Network accessline 31
    // 4. Constructed Request object await env.ASSETS.fetch(
  • Network accessline 32
    await env.ASSETS.fetch(
  • Network accessline 52
    // All resolve to same asset: env.ASSETS.fetch('https://example.com/logo.png')
  • Network accessline 53
    env.ASSETS.fetch('https://example.com/logo.png')
  • Network accessline 54
    env.ASSETS.fetch('https://ignored.host/logo.png')
  • Network accessline 55
    env.ASSETS.fetch('/logo.png')
  • Network accessline 160
    const response = await env.ASSETS.fetch(request)
  • Network accessline 178
    const response = await env.ASSETS.fetch(request)
  • Network accessline 193
    // Serve different assets based on conditions if (url.pathname === '/') {   return env.ASSETS.fetch('/index.html')
  • Network accessline 194
    if (url.pathname === '/') {   return env.ASSETS.fetch('/index.html') }
  • Network accessline 195
    return env.ASSETS.fetch('/index.html')
  • Network accessline 198
    return env.ASSETS.fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/static-assets/configuration.md

  • Network accessline 161
    Use current date for new projects. See [Compatibility Dates](https://developers.cloudflare.com/workers/configuration/compatibility-dates/) for full list.

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/static-assets/patterns.md

  • Network accessline 6
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 7
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 8
    return env.ASSETS.fetch(request)
  • Network accessline 16
    const response = await env.ASSETS.fetch('https://assets.local/logo.png')
  • Network accessline 22
    const url = new URL(request.url) url.pathname = '/index.html' return env.ASSETS.fetch(new Request(url, request))
  • Network accessline 24
    return env.ASSETS.fetch(new Request(url, request))
  • Network accessline 30
    const response = await env.ASSETS.fetch(request)
  • Network accessline 40
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 41
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 42
    const url = new URL(request.url)     if (url.pathname === '/') {       return env.ASSETS.fetch('/index.html')
  • Network accessline 43
    if (url.pathname === '/') {       return env.ASSETS.fetch('/index.html')     }
  • Network accessline 44
    return env.ASSETS.fetch('/index.html')
  • Network accessline 45
    }     return env.ASSETS.fetch(request)   },
  • Network accessline 46
    return env.ASSETS.fetch(request)
  • Network accessline 56
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 57
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 60
    return handleAPI(request, env)     }     return env.ASSETS.fetch(request)
  • Network accessline 61
    }     return env.ASSETS.fetch(request)   },
  • Network accessline 62
    return env.ASSETS.fetch(request)
  • Network accessline 78
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 79
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 85
    }     }     return env.ASSETS.fetch(request)
  • Network accessline 86
    }     return env.ASSETS.fetch(request)   },
  • Network accessline 87
    return env.ASSETS.fetch(request)
  • Network accessline 97
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 98
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 99
    const response = await env.ASSETS.fetch(request)
  • Network accessline 112
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 113
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 116
    const url = new URL(request.url)     if (url.pathname === '/') {       return env.ASSETS.fetch(`/index-${variant}.html`)
  • Network accessline 117
    if (url.pathname === '/') {       return env.ASSETS.fetch(`/index-${variant}.html`)     }
  • Network accessline 118
    return env.ASSETS.fetch(`/index-${variant}.html`)
  • Network accessline 119
    }     return env.ASSETS.fetch(request)   },
  • Network accessline 120
    return env.ASSETS.fetch(request)
  • Network accessline 128
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 129
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 131
    const url = new URL(request.url)     if (url.pathname === '/') {       return env.ASSETS.fetch(`/${locale}/index.html`)
  • Network accessline 132
    if (url.pathname === '/') {       return env.ASSETS.fetch(`/${locale}/index.html`)     }
  • Network accessline 133
    return env.ASSETS.fetch(`/${locale}/index.html`)
  • Network accessline 136
    url.pathname = `/${locale}${url.pathname}`     }     return env.ASSETS.fetch(url)
  • Network accessline 137
    }     return env.ASSETS.fetch(url)   },
  • Network accessline 138
    return env.ASSETS.fetch(url)
  • Network accessline 146
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 147
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 160
    }     }     return env.ASSETS.fetch(request)
  • Network accessline 161
    }     return env.ASSETS.fetch(request)   },
  • Network accessline 162
    return env.ASSETS.fetch(request)
  • Network accessline 172
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 173
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 174
    const response = await env.ASSETS.fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/README.md

  • Network accessline 54
    curl -X POST \
  • Network accessline 55
    "https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/copy" \
  • Network accessline 56
    [Credential-related source omitted]
  • Network accessline 58
    -d '{"url": "https://example.com/video.mp4"}'
  • Network accessline 64
    <iframe   src="https://customer-<CODE>.cloudflarestream.com/<VIDEO_ID>/iframe"
  • Network accessline 65
    src="https://customer-<CODE>.cloudflarestream.com/<VIDEO_ID>/iframe"
  • Network accessline 77
    curl -X POST \
  • Network accessline 78
    "https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/live_inputs" \
  • Network accessline 97
    - Dashboard: https://dash.cloudflare.com/?to=/:account/stream
  • Network accessline 98
    - API Docs: https://developers.cloudflare.com/api/resources/stream/
  • Network accessline 99
    - Stream Docs: https://developers.cloudflare.com/stream/

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/api-live.md

  • Access to secretsline 12
    [Credential-related source omitted]
  • Network accessline 26
    async function createLiveInput(accountId: string, apiToken: string) {   const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs`, {
  • Network accessline 27
    const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs`, {
  • Network accessline 48
    async function getLiveStatus(accountId: string, liveInputId: string, apiToken: string) {   const response = await fetch(
  • Network accessline 49
    const response = await fetch(
  • Network accessline 50
    `https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs/${liveInputId}`,
  • Network accessline 72
    streamKey: string, ) {   return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs/${liveInputId}/outputs`, {
  • Network accessline 73
    ) {   return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs/${liveInputId}/outputs`, {     method: 'POST',
  • Network accessline 74
    return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs/${liveInputId}/outputs`, {
  • Network accessline 114
    // Send to Stream via WHIP   const response = await fetch(`https://customer-<CODE>.cloudflarestream.com/${liveInputId}/webRTC/publish`, {
  • Network accessline 115
    const response = await fetch(`https://customer-<CODE>.cloudflarestream.com/${liveInputId}/webRTC/publish`, {
  • Network accessline 138
    const response = await fetch(`https://customer-<CODE>.cloudflarestream.com/${videoId}/webRTC/play`, {
  • Network accessline 162
    timeoutSeconds: 30, // Auto-stop 30s after stream ends   requireSignedURLs: true, // Require token for VOD playback   allowedOrigins: ['https://yourdomain.com'],
  • Network accessline 163
    requireSignedURLs: true, // Require token for VOD playback   allowedOrigins: ['https://yourdomain.com'], }
  • Network accessline 164
    allowedOrigins: ['https://yourdomain.com'],

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/api.md

  • Access to secretsline 14
    [Credential-related source omitted]
  • Network accessline 29
    const formData = new FormData()   formData.append('file', file)   return fetch(uploadURL, { method: 'POST', body: formData }).then((r) => r.json())
  • Network accessline 30
    formData.append('file', file)   return fetch(uploadURL, { method: 'POST', body: formData }).then((r) => r.json()) }
  • Network accessline 31
    return fetch(uploadURL, { method: 'POST', body: formData }).then((r) => r.json())
  • Network accessline 38
    const video = await client.stream.copy.create({   account_id: env.CF_ACCOUNT_ID,   url: 'https://example.com/video.mp4',
  • Network accessline 39
    account_id: env.CF_ACCOUNT_ID,   url: 'https://example.com/video.mp4',   meta: { name: 'My Video' },
  • Network accessline 40
    url: 'https://example.com/video.mp4',
  • Network accessline 51
    <iframe   src="https://customer-<CODE>.cloudflarestream.com/<VIDEO_ID>/iframe?autoplay=true&muted=true"
  • Network accessline 52
    src="https://customer-<CODE>.cloudflarestream.com/<VIDEO_ID>/iframe?autoplay=true&muted=true"
  • Network accessline 64
    // HLS const hlsUrl = `https://customer-<CODE>.cloudflarestream.com/${videoId}/manifest/video.m3u8`
  • Network accessline 65
    const hlsUrl = `https://customer-<CODE>.cloudflarestream.com/${videoId}/manifest/video.m3u8`
  • Network accessline 67
    // DASH const dashUrl = `https://customer-<CODE>.cloudflarestream.com/${videoId}/manifest/video.mpd`
  • Network accessline 68
    const dashUrl = `https://customer-<CODE>.cloudflarestream.com/${videoId}/manifest/video.mpd`
  • Network accessline 74
    // At specific time (seconds) const thumb = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.jpg?time=10s`
  • Network accessline 75
    const thumb = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.jpg?time=10s`
  • Network accessline 77
    // By percentage const thumbPct = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.jpg?time=50%`
  • Network accessline 78
    const thumbPct = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.jpg?time=50%`
  • Network accessline 80
    // Animated GIF const gif = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.gif`
  • Network accessline 81
    const gif = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.gif`
  • Network accessline 87
    // Low volume (<1k/day): Use API async function getSignedToken(accountId: string, videoId: string, apiToken: string) {   const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/token`, {
  • Network accessline 88
    async function getSignedToken(accountId: string, videoId: string, apiToken: string) {   const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/token`, {     method: 'POST',
  • Network accessline 89
    const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/token`, {
  • Network accessline 115
    const formData = new FormData()   formData.append('file', captionFile)   return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/captions/${language}`, {
  • Network accessline 116
    formData.append('file', captionFile)   return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/captions/${language}`, {     method: 'PUT',
  • Network accessline 117
    return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/captions/${language}`, {
  • Network accessline 128
    // TODO: Requires Workers AI integration - see workers-ai reference async function generateAICaptions(accountId: string, videoId: string, apiToken: string) {   return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/
  • Network accessline 129
    async function generateAICaptions(accountId: string, videoId: string, apiToken: string) {   return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/captions/generate`, {     method: 'POST',
  • Network accessline 130
    return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/captions/generate`, {
  • Network accessline 141
    async function clipVideo(accountId: string, videoId: string, apiToken: string, startTime: number, endTime: number) {   return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/clip`, {
  • Network accessline 142
    return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/clip`, {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/configuration.md

  • Network accessline 60
    curl -X POST \
  • Network accessline 61
    "https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/keys" \
  • Network accessline 79
    curl -X PUT \
  • Network accessline 80
    "https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/webhook" \
  • Network accessline 81
    [Credential-related source omitted]
  • Network accessline 83
    -d '{"notificationUrl": "https://your-worker.workers.dev/webhook"}'
  • Network accessline 100
    expiry: new Date(Date.now() + 3600000).toISOString(),   requireSignedURLs: true,   allowedOrigins: ['https://yourdomain.com'],
  • Network accessline 101
    requireSignedURLs: true,   allowedOrigins: ['https://yourdomain.com'],   meta: { creator: 'user-123' },
  • Network accessline 102
    allowedOrigins: ['https://yourdomain.com'],

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/gotchas.md

  • Network accessline 109
    const formData = new FormData()   formData.append('file', file)   const response = await fetch(url, { method: 'POST', body: formData })
  • Network accessline 110
    formData.append('file', file)   const response = await fetch(url, { method: 'POST', body: formData })   const result = await response.json()
  • Network accessline 111
    const response = await fetch(url, { method: 'POST', body: formData })

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/patterns.md

  • Network accessline 24
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 25
    async fetch(request: Request, env: Env): Promise<Response> {
  • Access to secretsline 27
    [Credential-related source omitted]
  • Network accessline 48
    async function handleUpload(file: File) {     setUploading(true)     const { uploadURL, uid } = await fetch('/api/upload-url', {
  • Network accessline 49
    setUploading(true)     const { uploadURL, uid } = await fetch('/api/upload-url', {       method: 'POST',
  • Network accessline 50
    const { uploadURL, uid } = await fetch('/api/upload-url', {
  • Network accessline 120
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 121
    async fetch(request: Request, env: Env): Promise<Response> {
  • Access to secretsline 124
    [Credential-related source omitted]
  • Possible obfuscationline 159
    JSON.parse(atob(jwkBase64)),

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tail-workers/README.md

  • Network accessline 74
    // Process events from producer Worker     ctx.waitUntil(       fetch(env.LOG_ENDPOINT, {
  • Network accessline 75
    ctx.waitUntil(       fetch(env.LOG_ENDPOINT, {         method: 'POST',
  • Network accessline 76
    fetch(env.LOG_ENDPOINT, {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tail-workers/api.md

  • Access to secretsline 10
    [Credential-related source omitted]
  • Network accessline 143
    ctx.waitUntil(       fetch(env.LOG_ENDPOINT, {
  • Network accessline 144
    fetch(env.LOG_ENDPOINT, {
  • Access to secretsline 151
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tail-workers/configuration.md

  • Network accessline 12
    // Process events from producer Worker     ctx.waitUntil(       fetch(env.LOG_ENDPOINT, {
  • Network accessline 13
    ctx.waitUntil(       fetch(env.LOG_ENDPOINT, {         method: 'POST',
  • Network accessline 14
    fetch(env.LOG_ENDPOINT, {
  • Network accessline 99
    "name": "my-tail-worker",   "vars": {     "LOG_ENDPOINT": "https://logs.example.com/ingest",
  • Network accessline 100
    "vars": {     "LOG_ENDPOINT": "https://logs.example.com/ingest",   },
  • Network accessline 101
    "LOG_ENDPOINT": "https://logs.example.com/ingest",

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tail-workers/gotchas.md

  • Network accessline 13
    export default {   async tail(events) {     fetch(endpoint, { body: JSON.stringify(events) })
  • Network accessline 14
    async tail(events) {     fetch(endpoint, { body: JSON.stringify(events) })   },
  • Network accessline 15
    fetch(endpoint, { body: JSON.stringify(events) })
  • Network accessline 20
    export default {   async tail(events, env, ctx) {     await fetch(endpoint, { body: JSON.stringify(events) })
  • Network accessline 21
    async tail(events, env, ctx) {     await fetch(endpoint, { body: JSON.stringify(events) })   },
  • Network accessline 22
    await fetch(endpoint, { body: JSON.stringify(events) })
  • Network accessline 29
    ctx.waitUntil(       (async () => {         await fetch(endpoint, { body: JSON.stringify(events) })
  • Network accessline 30
    (async () => {         await fetch(endpoint, { body: JSON.stringify(events) })         await processMore()
  • Network accessline 31
    await fetch(endpoint, { body: JSON.stringify(events) })
  • Network accessline 134
    (async () => {     try {       await fetch(env.ENDPOINT, { body: JSON.stringify(events) })
  • Network accessline 135
    try {       await fetch(env.ENDPOINT, { body: JSON.stringify(events) })     } catch (error) {
  • Network accessline 136
    await fetch(env.ENDPOINT, { body: JSON.stringify(events) })
  • Network accessline 179
    export default {   async fetch(request) {
  • Network accessline 180
    async fetch(request) {
  • Network accessline 190
    Trigger: `curl https://producer.example.workers.dev/test`

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tail-workers/patterns.md

  • Network accessline 36
    ctx.waitUntil(       fetch(env.LOG_ENDPOINT, {
  • Network accessline 37
    fetch(env.LOG_ENDPOINT, {
  • Network accessline 55
    ctx.waitUntil(       fetch(env.ERROR_ENDPOINT, {
  • Network accessline 56
    fetch(env.ERROR_ENDPOINT, {
  • Network accessline 122
    if (errors.length > 0) {       tasks.push(         fetch(env.ERROR_ENDPOINT, {
  • Network accessline 123
    tasks.push(         fetch(env.ERROR_ENDPOINT, {           method: 'POST',
  • Network accessline 124
    fetch(env.ERROR_ENDPOINT, {
  • Network accessline 130
    if (success.length > 0) {       tasks.push(         fetch(env.SUCCESS_ENDPOINT, {
  • Network accessline 131
    tasks.push(         fetch(env.SUCCESS_ENDPOINT, {           method: 'POST',
  • Network accessline 132
    fetch(env.SUCCESS_ENDPOINT, {
  • Network accessline 151
    if (Math.random() > 0.1) return // 10% sample rate     ctx.waitUntil(       fetch(env.LOG_ENDPOINT, {
  • Network accessline 152
    ctx.waitUntil(       fetch(env.LOG_ENDPOINT, {         method: 'POST',
  • Network accessline 153
    fetch(env.LOG_ENDPOINT, {
  • Network accessline 171
    const batch = env.BATCH_DO.get(env.BATCH_DO.idFromName('batch'))     ctx.waitUntil(       batch.fetch('https://batch/add', {
  • Network accessline 172
    ctx.waitUntil(       batch.fetch('https://batch/add', {         method: 'POST',
  • Network accessline 173
    batch.fetch('https://batch/add', {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/terraform/README.md

  • Access to secretsline 48
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/terraform/api.md

  • Network accessline 157
    output "worker_url" {   value = "https://${cloudflare_worker_domain.api.hostname}"
  • Network accessline 158
    value = "https://${cloudflare_worker_domain.api.hostname}"

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/terraform/configuration.md

  • Access to secretsline 67
    [Credential-related source omitted]
  • Network accessline 141
    rules {     action = "redirect"; enabled = true; expression = "(http.request.uri.path eq \"/old\")"     action_parameters { from_value { status_code = 301; target_url { value = "https://example.com/new" }}}
  • Network accessline 142
    action = "redirect"; enabled = true; expression = "(http.request.uri.path eq \"/old\")"     action_parameters { from_value { status_code = 301; target_url { value = "https://example.com/new" }}}   }
  • Network accessline 143
    action_parameters { from_value { status_code = 301; target_url { value = "https://example.com/new" }}}
  • Access to secretsline 188
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/terraform/gotchas.md

  • Access to secretsline 22
    [Credential-related source omitted]
  • Dangerous shell operationline 110
    **Solution:** Import resource back into state with `terraform import cloudflare_zone.example <zone-id>` or remove from state with `terraform state rm cloudflare_zone.example`
  • Network accessline 148
    - [API](./api.md) - Data sources - [Patterns](./patterns.md) - Use cases - Provider docs: https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs
  • Network accessline 150
    - Provider docs: https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/terraform/patterns.md

  • Access to secretsline 71
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/README.md

  • Network accessline 95
    ingress:   - hostname: app.example.com     service: http://localhost:8000
  • Network accessline 96
    - hostname: app.example.com     service: http://localhost:8000   - hostname: api.example.com
  • Network accessline 97
    service: http://localhost:8000
  • Network accessline 98
    - hostname: api.example.com     service: https://localhost:8443     originRequest:
  • Network accessline 99
    service: https://localhost:8443

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/api.md

  • Network accessline 5
    **Base URL**: `https://api.cloudflare.com/client/v4`
  • Access to secretsline 10
    [Credential-related source omitted]
  • Access to secretsline 21
    [Credential-related source omitted]
  • Network accessline 32
    [Credential-related source omitted]
  • Access to secretsline 32
    [Credential-related source omitted]
  • Access to secretsline 33
    [Credential-related source omitted]
  • Network accessline 58
    [Credential-related source omitted]
  • Access to secretsline 58
    [Credential-related source omitted]
  • Access to secretsline 59
    [Credential-related source omitted]
  • Network accessline 79
    [Credential-related source omitted]
  • Access to secretsline 79
    [Credential-related source omitted]
  • Access to secretsline 80
    [Credential-related source omitted]
  • Network accessline 99
    [Credential-related source omitted]
  • Access to secretsline 99
    [Credential-related source omitted]
  • Access to secretsline 100
    [Credential-related source omitted]
  • Network accessline 104
    "ingress": [         {"hostname": "app.example.com", "service": "http://localhost:8000"},
  • Network accessline 105
    {"hostname": "app.example.com", "service": "http://localhost:8000"},
  • Network accessline 116
    account_id: accountId,   config: {     ingress: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }],
  • Network accessline 117
    config: {     ingress: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }],   },
  • Network accessline 118
    ingress: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }],
  • Network accessline 128
    [Credential-related source omitted]
  • Access to secretsline 128
    [Credential-related source omitted]
  • Access to secretsline 129
    [Credential-related source omitted]
  • Access to secretsline 160
    [Credential-related source omitted]
  • Access to secretsline 163
    [Credential-related source omitted]
  • Network accessline 181
    # Create DNS route curl -X POST "https://api.cloudflare.com/client/v4/accounts/{account_id}/tunnels/{tunnel_id}/connections" \
  • Network accessline 182
    [Credential-related source omitted]
  • Access to secretsline 182
    [Credential-related source omitted]
  • Access to secretsline 183
    [Credential-related source omitted]
  • Network accessline 186
    # Delete route curl -X DELETE "https://api.cloudflare.com/client/v4/accounts/{account_id}/tunnels/{tunnel_id}/connections/{route_id}" \
  • Network accessline 187
    [Credential-related source omitted]
  • Access to secretsline 187
    [Credential-related source omitted]
  • Access to secretsline 188
    [Credential-related source omitted]
  • Network accessline 194
    # Add IP route curl -X POST "https://api.cloudflare.com/client/v4/accounts/{account_id}/tunnels/{tunnel_id}/routes" \
  • Network accessline 195
    [Credential-related source omitted]
  • Access to secretsline 195
    [Credential-related source omitted]
  • Access to secretsline 196
    [Credential-related source omitted]
  • Network accessline 199
    # List IP routes curl -X GET "https://api.cloudflare.com/client/v4/accounts/{account_id}/tunnels/{tunnel_id}/routes" \
  • Network accessline 200
    [Credential-related source omitted]
  • Access to secretsline 200
    [Credential-related source omitted]
  • Access to secretsline 201
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/configuration.md

  • Network accessline 28
    ingress:   - hostname: app.example.com     service: http://localhost:8000
  • Network accessline 29
    - hostname: app.example.com     service: http://localhost:8000   - service: http_status:404 # Required catch-all
  • Network accessline 30
    service: http://localhost:8000
  • Network accessline 41
    - hostname: static.example.com     path: \.(jpg|png|css|js)$     service: https://localhost:8001
  • Network accessline 43
    service: https://localhost:8001
  • Network accessline 45
    # Wildcard hostname   - hostname: '*.example.com'     service: https://localhost:8002
  • Network accessline 47
    service: https://localhost:8002
  • Network accessline 49
    # Path only (all hostnames)   - path: /api/.*     service: http://localhost:9000
  • Network accessline 51
    service: http://localhost:9000
  • Network accessline 60
    cloudflared tunnel ingress validate cloudflared tunnel ingress rule https://foo.example.com
  • Network accessline 61
    cloudflared tunnel ingress rule https://foo.example.com
  • Network accessline 66
    | Protocol | Format                   | Client Requirement       | | -------- | ------------------------ | ------------------------ | | HTTP     | `http://localhost:8000`  | Browser                  |
  • Network accessline 67
    | -------- | ------------------------ | ------------------------ | | HTTP     | `http://localhost:8000`  | Browser                  | | HTTPS    | `https://localhost:8443` | Browser                  |
  • Network accessline 68
    | HTTP     | `http://localhost:8000`  | Browser                  |
  • Network accessline 69
    | HTTPS    | `https://localhost:8443` | Browser                  |
  • Network accessline 131
    ingress:   - hostname: app.example.com     service: http://localhost:8000
  • Network accessline 132
    - hostname: app.example.com     service: http://localhost:8000   - service: http_status:404
  • Network accessline 133
    service: http://localhost:8000

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/gotchas.md

  • Network accessline 130
    cloudflared tunnel --loglevel debug run my-tunnel cloudflared tunnel ingress rule https://app.example.com
  • Network accessline 131
    cloudflared tunnel ingress rule https://app.example.com
  • Network accessline 141
    ingress:   - hostname: app.example.com     service: http://localhost:8000
  • Network accessline 142
    - hostname: app.example.com     service: http://localhost:8000   - service: http_status:404
  • Network accessline 143
    service: http://localhost:8000

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/networking.md

  • Network accessline 69
    # Test port 7844 (QUIC/UDP) nc -zvu edge.argotunnel.com 7844
  • Network accessline 70
    nc -zvu edge.argotunnel.com 7844
  • Network accessline 72
    # Test port 443 (HTTP/2 fallback) nc -zv edge.argotunnel.com 443
  • Network accessline 73
    nc -zv edge.argotunnel.com 443
  • Network accessline 150
    # Enable metrics endpoint cloudflared tunnel --metrics localhost:9090 run my-tunnel curl localhost:9090/metrics | grep cloudflared_tunnel
  • Network accessline 152
    curl localhost:9090/metrics | grep cloudflared_tunnel
  • Network accessline 154
    # Test latency curl -w "time_total: %{time_total}\n" -o /dev/null https://myapp.example.com
  • Network accessline 155
    curl -w "time_total: %{time_total}\n" -o /dev/null https://myapp.example.com

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/patterns.md

  • Access to secretsline 11
    [Credential-related source omitted]
  • Network accessline 68
    ingress:   - hostname: app.example.com     service: http://localhost:8000
  • Network accessline 69
    - hostname: app.example.com     service: http://localhost:8000   - service: http_status:404
  • Network accessline 70
    service: http://localhost:8000
  • Network accessline 81
    ingress:   - hostname: myapp.example.com     service: http://localhost:3000
  • Network accessline 82
    - hostname: myapp.example.com     service: http://localhost:3000   - service: http_status:404
  • Network accessline 83
    service: http://localhost:3000
  • Network accessline 101
    ingress:   - hostname: grpc.example.com     service: http://localhost:50051
  • Network accessline 102
    - hostname: grpc.example.com     service: http://localhost:50051     originRequest:
  • Network accessline 103
    service: http://localhost:50051
  • Network accessline 128
    ingress_rule {       hostname = "app.example.com"       service  = "http://localhost:8000"
  • Network accessline 129
    hostname = "app.example.com"       service  = "http://localhost:8000"     }
  • Network accessline 130
    service  = "http://localhost:8000"
  • Network accessline 166
    tunnelId: tunnel.id,   config: {     ingressRules: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }],
  • Network accessline 167
    config: {     ingressRules: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }],   },
  • Network accessline 168
    ingressRules: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }],
  • Dangerous shell operationline 194
    sudo cloudflared service install
  • Dangerous shell operationline 195
    sudo launchctl start com.cloudflare.cloudflared

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turn/README.md

  • Network accessline 83
    - [Cloudflare Calls Documentation](https://developers.cloudflare.com/calls/)
  • Network accessline 84
    - [Cloudflare TURN Service Docs](https://developers.cloudflare.com/realtime/turn/)
  • Network accessline 85
    - [Cloudflare API Reference](https://developers.cloudflare.com/api/resources/calls/subresources/turn/)
  • Network accessline 86
    - [Orange Meets (Open Source Example)](https://github.com/cloudflare/orange)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turn/api.md

  • Network accessline 9
    Base URL: `https://api.cloudflare.com/client/v4`
  • Network accessline 64
    POST https://rtc.live.cloudflare.com/v1/turn/keys/{key_id}/credentials/generate
  • Network accessline 106
    POST https://rtc.live.cloudflare.com/v1/turn/keys/{key_id}/credentials/revoke
  • Network accessline 192
    const response = await fetch(`https://rtc.live.cloudflare.com/v1/turn/keys/${config.keyId}/credentials/generate`, {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turn/configuration.md

  • Access to secretsline 8
    [Credential-related source omitted]
  • Network accessline 70
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 71
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 80
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 81
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 89
    const response = await fetch(
  • Network accessline 90
    `https://rtc.live.cloudflare.com/v1/turn/keys/${env.TURN_KEY_ID}/credentials/generate`,
  • Access to secretsline 94
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turn/gotchas.md

  • Network accessline 101
    [Credential-related source omitted]
  • Network accessline 102
    [Credential-related source omitted]
  • Network accessline 103
    const response = await fetch(`https://rtc.live.cloudflare.com/v1/turn/...`, {
  • Network accessline 107
    // ✅ GOOD: Generate credentials server-side const response = await fetch('/api/turn-credentials')
  • Network accessline 108
    const response = await fetch('/api/turn-credentials')
  • Network accessline 134
    Reference: [RFC 8445 Section 2.4](https://datatracker.ietf.org/doc/html/rfc8445#section-2.4)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turn/patterns.md

  • Network accessline 22
    async function getTURNConfig(): Promise<RTCIceServer[]> {   const response = await fetch('/api/turn-credentials')
  • Network accessline 23
    const response = await fetch('/api/turn-credentials')
  • Network accessline 80
    async function refreshTURNCredentials(pc: RTCPeerConnection): Promise<void> {   const newCreds = await fetch('/turn-credentials').then((r) => r.json())
  • Network accessline 81
    const newCreds = await fetch('/turn-credentials').then((r) => r.json())
  • Network accessline 133
    const res = await fetch(`https://rtc.live.cloudflare.com/v1/turn/keys/${keyId}/credentials/generate`, {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turnstile/README.md

  • Network accessline 22
    <!-- 1. Add script --> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  • Network accessline 23
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  • Network accessline 35
    <div id="turnstile-container"></div> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>
  • Network accessline 36
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>
  • Network accessline 48
    // Cloudflare Workers export default {   async fetch(request) {
  • Network accessline 49
    export default {   async fetch(request) {     const formData = await request.formData()
  • Network accessline 50
    async fetch(request) {
  • Network accessline 54
    const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
  • Access to secretsline 58
    [Credential-related source omitted]
  • Network accessline 101
    - [Cloudflare Turnstile Docs](https://developers.cloudflare.com/turnstile/)
  • Network accessline 102
    - [Dashboard](https://dash.cloudflare.com/?to=/:account/turnstile)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turnstile/api.md

  • Network accessline 115
    **Endpoint:** `https://challenges.cloudflare.com/turnstile/v0/siteverify`
  • Network accessline 134
    // Cloudflare Workers const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
  • Network accessline 135
    const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
  • Access to secretsline 139
    [Credential-related source omitted]
  • Network accessline 240
    <!-- Standard --> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  • Network accessline 241
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  • Network accessline 243
    <!-- Explicit render mode --> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>
  • Network accessline 244
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>
  • Network accessline 246
    <!-- With load callback --> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script>
  • Network accessline 247
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script>

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turnstile/configuration.md

  • Network accessline 8
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  • Network accessline 16
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>
  • Network accessline 24
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=myCallback"></script>
  • Network accessline 36
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha"></script>
  • Network accessline 148
    script-src https://challenges.cloudflare.com;
  • Network accessline 149
    frame-src https://challenges.cloudflare.com;
  • Network accessline 156
    http-equiv="Content-Security-Policy"   content="default-src 'self';                 script-src 'self' https://challenges.cloudflare.com;
  • Network accessline 157
    content="default-src 'self';                 script-src 'self' https://challenges.cloudflare.com;                 frame-src https://challenges.cloudflare.com;"
  • Network accessline 158
    script-src 'self' https://challenges.cloudflare.com;
  • Network accessline 159
    frame-src https://challenges.cloudflare.com;"

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turnstile/gotchas.md

  • Network accessline 13
    [Credential-related source omitted]
  • Network accessline 14
    [Credential-related source omitted]
  • Network accessline 15
    const validation = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
  • Network accessline 144
    <meta   http-equiv="Content-Security-Policy"   content="script-src 'self' https://challenges.cloudflare.com;
  • Network accessline 145
    http-equiv="Content-Security-Policy"   content="script-src 'self' https://challenges.cloudflare.com;                 frame-src https://challenges.cloudflare.com;"
  • Network accessline 146
    content="script-src 'self' https://challenges.cloudflare.com;
  • Network accessline 147
    frame-src https://challenges.cloudflare.com;"
  • Access to secretsline 229
    [Credential-related source omitted]
  • Access to secretsline 236
    [Credential-related source omitted]
  • Access to secretsline 239
    [Credential-related source omitted]
  • Access to secretsline 243
    [Credential-related source omitted]
  • Network accessline 248
    - [Turnstile Docs](https://developers.cloudflare.com/turnstile/)
  • Network accessline 249
    - [Dashboard](https://dash.cloudflare.com/?to=/:account/turnstile)
  • Network accessline 250
    - [Error Codes](https://developers.cloudflare.com/turnstile/troubleshooting/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turnstile/patterns.md

  • Network accessline 9
    <html>   <head>     <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  • Network accessline 10
    <head>     <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>   </head>
  • Network accessline 11
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  • Network accessline 26
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>
  • Network accessline 38
    const response = await fetch('/submit', {
  • Network accessline 62
    e.preventDefault()         if (!token) return         await fetch('/api/submit', {
  • Network accessline 63
    if (!token) return         await fetch('/api/submit', {           method: 'POST',
  • Network accessline 64
    await fetch('/api/submit', {
  • Network accessline 96
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 97
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 109
    // Validate token     const ip = request.headers.get('CF-Connecting-IP')     const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
  • Network accessline 110
    const ip = request.headers.get('CF-Connecting-IP')     const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {       method: 'POST',
  • Network accessline 111
    const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
  • Access to secretsline 115
    [Credential-related source omitted]
  • Access to secretsline 139
    [Credential-related source omitted]
  • Network accessline 153
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script>
  • Access to secretsline 188
    [Credential-related source omitted]
  • Access to secretsline 191
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/vectorize/README.md

  • Network accessline 128
    - [Official Docs](https://developers.cloudflare.com/vectorize/)
  • Network accessline 129
    - [Client API Reference](https://developers.cloudflare.com/vectorize/reference/client-api/)
  • Network accessline 130
    - [Workers AI Models](https://developers.cloudflare.com/workers-ai/models/#text-embeddings)
  • Network accessline 131
    - [Discord: #vectorize](https://discord.cloudflare.com)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/waf/README.md

  • Access to secretsline 30
    [Credential-related source omitted]
  • Network accessline 123
    - [Cloudflare WAF Docs](https://developers.cloudflare.com/waf/)
  • Network accessline 124
    - [Ruleset Engine](https://developers.cloudflare.com/ruleset-engine/)
  • Network accessline 125
    - [Expression Reference](https://developers.cloudflare.com/ruleset-engine/rules-language/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/waf/api.md

  • Access to secretsline 9
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/waf/configuration.md

  • Network accessline 5
    **API Token**: Create at https://dash.cloudflare.com/profile/api-tokens
  • Access to secretsline 14
    [Credential-related source omitted]
  • Access to secretsline 27
    [Credential-related source omitted]
  • Network accessline 208
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 209
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 210
    return fetch(`https://api.cloudflare.com/client/v4/zones/${env.ZONE_ID}/rulesets`, {
  • Access to secretsline 211
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/waf/patterns.md

  • Access to secretsline 167
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/web-analytics/README.md

  • Network accessline 72
    script-src https://static.cloudflareinsights.com https://cloudflareinsights.com;
  • Network accessline 147
    - [Cloudflare Web Analytics Docs](https://developers.cloudflare.com/analytics/web-analytics/)
  • Network accessline 148
    - [Core Web Vitals Guide](https://web.dev/vitals/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/web-analytics/configuration.md

  • Network accessline 21
    script-src https://static.cloudflareinsights.com https://cloudflareinsights.com;
  • Network accessline 29
    <script   defer   src="https://static.cloudflareinsights.com/beacon.min.js"
  • Network accessline 30
    [Credential-related source omitted]
  • Network accessline 31
    src="https://static.cloudflareinsights.com/beacon.min.js"

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/web-analytics/gotchas.md

  • Network accessline 20
    script-src 'self' https://static.cloudflareinsights.com https://cloudflareinsights.com;

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/web-analytics/integration.md

  • Network accessline 8
    <script   defer   src="https://static.cloudflareinsights.com/beacon.min.js"
  • Network accessline 9
    [Credential-related source omitted]
  • Network accessline 10
    src="https://static.cloudflareinsights.com/beacon.min.js"
  • Network accessline 48
    script-src 'self' https://static.cloudflareinsights.com;
  • Network accessline 49
    connect-src 'self' https://cloudflareinsights.com;
  • Network accessline 56
    if (localStorage.getItem('analytics-consent') === 'true') {   const script = document.createElement('script')   script.src = 'https://static.cloudflareinsights.com/beacon.min.js'
  • Network accessline 57
    const script = document.createElement('script')   script.src = 'https://static.cloudflareinsights.com/beacon.min.js'   script.defer = true
  • Network accessline 58
    script.src = 'https://static.cloudflareinsights.com/beacon.min.js'

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/web-analytics/patterns.md

  • Network accessline 53
    if (consent === 'accepted') {   const script = document.createElement('script')   script.src = 'https://static.cloudflareinsights.com/beacon.min.js'
  • Network accessline 54
    [Credential-related source omitted]
  • Network accessline 55
    script.src = 'https://static.cloudflareinsights.com/beacon.min.js'
  • Access to secretsline 76
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workerd/api.md

  • Network accessline 8
    export default {   async fetch(request, env, ctx) {
  • Network accessline 9
    async fetch(request, env, ctx) {
  • Network accessline 10
    const value = await env.KV.get('key') // Bindings in env     const response = await env.API.fetch(request) // Service binding     ctx.waitUntil(logRequest(request)) // Background task
  • Network accessline 11
    const response = await env.API.fetch(request) // Service binding
  • Access to secretsline 43
    [Credential-related source omitted]
  • Network accessline 46
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 47
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 86
    async fetch(request) {
  • Network accessline 116
    - `fetch()`, `Request`, `Response`, `Headers`
  • Network accessline 153
    const response = await fetch('https://example.com')

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workerd/configuration.md

  • Access to secretsline 78
    [Credential-related source omitted]
  • Network accessline 137
    const derived :Workerd.Worker = (   inherit = "base-service",   bindings = [(name = "API_URL", text = "https://api.com"), (name = "DB", service = "postgres")]
  • Network accessline 138
    inherit = "base-service",   bindings = [(name = "API_URL", text = "https://api.com"), (name = "DB", service = "postgres")] );
  • Network accessline 139
    bindings = [(name = "API_URL", text = "https://api.com"), (name = "DB", service = "postgres")]
  • Access to secretsline 166
    [Credential-related source omitted]
  • Access to secretsline 175
    [Credential-related source omitted]
  • Access to secretsline 185
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workerd/gotchas.md

  • Network accessline 63
    **Cause:** Socket misconfigured, no fetch handler, or port unavailable **Solution:** Verify socket `address` matches, worker exports `fetch()`, port available
  • Network accessline 64
    **Solution:** Verify socket `address` matches, worker exports `fetch()`, port available
  • Network accessline 125
    **Problem:** Breaking changes after compat date update **Cause:** New flags enabled between dates **Solution:** Review [compat dates docs](https://developers.cloudflare.com/workers/configuration/compatibility-dates/), test locally first
  • Network accessline 127
    **Solution:** Review [compat dates docs](https://developers.cloudflare.com/workers/configuration/compatibility-dates/), test locally first
  • Network accessline 147
    5. **Check versions**: Workerd version vs compat date 6. **Isolate issue**: Minimal repro config 7. **Review schema**: [workerd.capnp](https://github.com/cloudflare/workerd/blob/main/src/workerd/server/workerd.capnp)
  • Network accessline 149
    7. **Review schema**: [workerd.capnp](https://github.com/cloudflare/workerd/blob/main/src/workerd/server/workerd.capnp)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workerd/patterns.md

  • Network accessline 47
    const prodWorker :Workerd.Worker = (   inherit = "base-service",   bindings = [(name = "API_URL", text = "https://api.prod.com")]
  • Network accessline 48
    inherit = "base-service",   bindings = [(name = "API_URL", text = "https://api.prod.com")] );
  • Network accessline 49
    bindings = [(name = "API_URL", text = "https://api.prod.com")]
  • Network accessline 178
    export default {   async fetch(request, env, ctx) {
  • Network accessline 179
    async fetch(request, env, ctx) {
  • Network accessline 193
    export default {   async fetch(request, env, ctx) {
  • Network accessline 194
    async fetch(request, env, ctx) {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-ai/README.md

  • Network accessline 25
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 26
    async fetch(request: Request, env: Env) {
  • Network accessline 99
    curl https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/ai/run/@cf/meta/llama-3.1-8b-instruct \
  • Network accessline 112
    const model = openai('model-name', {   baseURL: 'https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/ai/v1',
  • Network accessline 113
    baseURL: 'https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/ai/v1',
  • Network accessline 179
    # View model catalog # https://developers.cloudflare.com/workers-ai/models/
  • Network accessline 180
    # https://developers.cloudflare.com/workers-ai/models/

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-ai/api.md

  • Network accessline 97
    curl https://api.cloudflare.com/client/v4/accounts/{account_id}/ai/run/@cf/meta/llama-3.1-8b-instruct \

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-ai/configuration.md

  • Network accessline 27
    export default {   async fetch(request: Request, env: Env) {
  • Network accessline 28
    async fetch(request: Request, env: Env) {
  • Network accessline 46
    const response = await fetch(
  • Network accessline 47
    `https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/ai/run/@cf/meta/llama-3.1-8b-instruct`,
  • Access to secretsline 50
    [Credential-related source omitted]
  • Network accessline 64
    [Credential-related source omitted]
  • Network accessline 65
    [Credential-related source omitted]
  • Access to secretsline 65
    [Credential-related source omitted]
  • Network accessline 66
    baseURL: `https://api.cloudflare.com/client/v4/accounts/${env.ACCOUNT_ID}/ai/v1`,

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-ai/gotchas.md

  • Network accessline 9
    // ✅ CORRECT - Use native binding export default {   async fetch(request: Request, env: Env) {
  • Network accessline 10
    export default {   async fetch(request: Request, env: Env) {     await env.AI.run('@cf/meta/llama-3.1-8b-instruct', { messages: [...] });
  • Network accessline 11
    async fetch(request: Request, env: Env) {
  • Network accessline 125
    import { openai } from '@ai-sdk/openai' const model = openai('gpt-3.5-turbo', {   baseURL: 'https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/ai/v1',
  • Network accessline 126
    [Credential-related source omitted]
  • Network accessline 127
    baseURL: 'https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/ai/v1',

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-for-platforms/README.md

  • Network accessline 18
    **One-click deploy:** [Platform Starter Kit](https://github.com/cloudflare/workers-for-platforms-example) deploys complete WfP setup with dispatch namespace, dispatch worker, and user worker example.
  • Network accessline 20
    [![Deploy to Cloudflare](https://deploy.workers.cloudflare.com/button)](https://deploy.workers.cloudflare.com/?url=https://github.com/cloudflare/workers-for-platforms-example)
  • Network accessline 92
    - [durable-objects](../durable-objects/) - Stateful multi-tenant patterns - [sandbox](../sandbox/) - Alternative for untrusted code execution - [Reference Architecture: Programmable Platforms](https://developers.cloudflare.com/reference-arc
  • Network accessline 93
    - [sandbox](../sandbox/) - Alternative for untrusted code execution - [Reference Architecture: Programmable Platforms](https://developers.cloudflare.com/reference-architecture/diagrams/serverless/programmable-platforms/) - [Reference Archit
  • Network accessline 94
    - [Reference Architecture: Programmable Platforms](https://developers.cloudflare.com/reference-architecture/diagrams/serverless/programmable-platforms/)
  • Network accessline 95
    - [Reference Architecture: AI Vibe Coding Platform](https://developers.cloudflare.com/reference-architecture/diagrams/ai/ai-vibe-coding-platform/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-for-platforms/api.md

  • Network accessline 6
    [Credential-related source omitted]
  • Access to secretsline 6
    [Credential-related source omitted]
  • Network accessline 7
    "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/workers/dispatch/namespaces/$NAMESPACE/scripts/$SCRIPT_NAME" \
  • Access to secretsline 8
    [Credential-related source omitted]
  • Access to secretsline 18
    [Credential-related source omitted]
  • Network accessline 45
    interface DynamicDispatchLimits {   cpuMs?: number // Max CPU milliseconds   subRequests?: number // Max fetch() calls
  • Network accessline 46
    cpuMs?: number // Max CPU milliseconds   subRequests?: number // Max fetch() calls }
  • Network accessline 47
    subRequests?: number // Max fetch() calls
  • Network accessline 64
    curl -X PUT ".../scripts/$SCRIPT_NAME" \
  • Network accessline 79
    # List curl "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/workers/dispatch/namespaces/$NAMESPACE/scripts" \
  • Network accessline 80
    [Credential-related source omitted]
  • Access to secretsline 80
    [Credential-related source omitted]
  • Access to secretsline 81
    [Credential-related source omitted]
  • Network accessline 83
    [Credential-related source omitted]
  • Network accessline 84
    [Credential-related source omitted]
  • Access to secretsline 84
    [Credential-related source omitted]
  • Network accessline 86
    [Credential-related source omitted]
  • Network accessline 87
    [Credential-related source omitted]
  • Access to secretsline 87
    [Credential-related source omitted]
  • Network accessline 99
    [Credential-related source omitted]
  • Access to secretsline 99
    [Credential-related source omitted]
  • Access to secretsline 100
    [Credential-related source omitted]
  • Network accessline 114
    curl -X POST ".../workers/assets/upload?base64=true" \
  • Network accessline 125
    curl -X PUT ".../scripts/$SCRIPT_NAME" \
  • Network accessline 141
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 142
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 143
    const userWorkerName = new URL(request.url).hostname.split('.')[0]     const userWorker = env.DISPATCHER.get(userWorkerName)     return await userWorker.fetch(request)
  • Network accessline 144
    const userWorker = env.DISPATCHER.get(userWorkerName)     return await userWorker.fetch(request)   },
  • Network accessline 145
    return await userWorker.fetch(request)
  • Network accessline 153
    const pathParts = new URL(request.url).pathname.split('/').filter(Boolean) const userWorker = env.DISPATCHER.get(pathParts[0]) return await userWorker.fetch(request)
  • Network accessline 155
    return await userWorker.fetch(request)
  • Network accessline 162
    const userWorkerName = await env.ROUTING_KV.get(hostname) const userWorker = env.DISPATCHER.get(userWorkerName) return await userWorker.fetch(request)
  • Network accessline 164
    return await userWorker.fetch(request)
  • Network accessline 184
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 185
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 196
    const headers = new Headers(request.headers)       headers.set('Authorization', `Bearer ${generateJWT(customerName)}`)       return fetch(new Request(request, { headers }))
  • Network accessline 197
    headers.set('Authorization', `Bearer ${generateJWT(customerName)}`)       return fetch(new Request(request, { headers }))     }
  • Network accessline 198
    return fetch(new Request(request, { headers }))
  • Network accessline 201
    return fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-for-platforms/configuration.md

  • Network accessline 32
    [Credential-related source omitted]
  • Access to secretsline 32
    [Credential-related source omitted]
  • Network accessline 33
    "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/workers/dispatch/namespaces/$NAMESPACE" \
  • Access to secretsline 34
    [Credential-related source omitted]
  • Network accessline 82
    limits: {       cpuMs: 10, // Max CPU ms       subRequests: 5, // Max fetch() calls
  • Network accessline 83
    cpuMs: 10, // Max CPU ms       subRequests: 5, // Max fetch() calls     },
  • Network accessline 84
    subRequests: 5, // Max fetch() calls
  • Network accessline 93
    try {   return await userWorker.fetch(request)
  • Network accessline 94
    return await userWorker.fetch(request)
  • Network accessline 139
    # Set tags curl -X PUT ".../tags" -d '["customer-123", "pro", "production"]'
  • Network accessline 140
    curl -X PUT ".../tags" -d '["customer-123", "pro", "production"]'
  • Network accessline 142
    # Filter by tag curl ".../scripts?tags=production%3Ayes"
  • Network accessline 143
    curl ".../scripts?tags=production%3Ayes"
  • Network accessline 145
    # Delete by tag curl -X DELETE ".../scripts?tags=customer-123%3Ayes"
  • Network accessline 146
    curl -X DELETE ".../scripts?tags=customer-123%3Ayes"

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-for-platforms/gotchas.md

  • Network accessline 11
    try {   const userWorker = env.DISPATCHER.get(workerName)   return userWorker.fetch(request)
  • Network accessline 12
    const userWorker = env.DISPATCHER.get(workerName)   return userWorker.fetch(request) } catch (e) {
  • Network accessline 13
    return userWorker.fetch(request)
  • Network accessline 59
    **Cause:** Outbound Worker enabled blocks `connect()` API for TCP sockets   **Solution:** Outbound Workers only intercept `fetch()` calls; TCP socket connections unavailable when outbound configured. Remove outbound if TCP needed, or use pr
  • Network accessline 60
    **Solution:** Outbound Workers only intercept `fetch()` calls; TCP socket connections unavailable when outbound configured. Remove outbound if TCP needed, or use proxy pattern.
  • Network accessline 123
    See [Cloudflare API Rate Limits](https://developers.cloudflare.com/fundamentals/api/reference/limits/) for details.
  • Network accessline 129
    | CPU time (custom limits)    | Up to Workers plan limit    | Set per-invocation in dispatch worker | | Subrequests (custom limits) | Up to Workers plan limit    | Set per-invocation in dispatch worker | | Outbound Worker subrequests | Not 
  • Network accessline 130
    | Subrequests (custom limits) | Up to Workers plan limit    | Set per-invocation in dispatch worker | | Outbound Worker subrequests | Not intercepted for DO/mTLS | Only regular fetch() calls            | | TCP sockets with outbound   | Disa
  • Network accessline 131
    | Outbound Worker subrequests | Not intercepted for DO/mTLS | Only regular fetch() calls            |

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-for-platforms/patterns.md

  • Network accessline 11
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 12
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 23
    const userWorker = env.DISPATCHER.get(userWorkerName, {}, { limits })     return await userWorker.fetch(request)
  • Network accessline 24
    return await userWorker.fetch(request)
  • Network accessline 69
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 70
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 78
    const userWorker = env.DISPATCHER.get(hostnameData.workerName)     return await userWorker.fetch(request)
  • Network accessline 79
    return await userWorker.fetch(request)
  • Network accessline 164
    **VibeSDK:** For AI-powered code generation + deployment platforms, see [VibeSDK](https://github.com/cloudflare/vibesdk) - handles AI generation, sandbox execution, live preview, and deployment.
  • Network accessline 166
    Reference: [AI Vibe Coding Platform Architecture](https://developers.cloudflare.com/reference-architecture/diagrams/ai/ai-vibe-coding-platform/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-playground/README.md

  • Network accessline 7
    **URL:** [workers.cloudflare.com/playground](https://workers.cloudflare.com/playground)
  • Network accessline 27
    export default {   async fetch(request, env, ctx) {
  • Network accessline 28
    async fetch(request, env, ctx) {
  • Network accessline 37
    export default {   async fetch(request, env, ctx) {
  • Network accessline 38
    async fetch(request, env, ctx) {
  • Network accessline 48
    export default {   async fetch(request, env, ctx) {
  • Network accessline 49
    async fetch(request, env, ctx) {
  • Network accessline 50
    const response = await fetch('https://example.com')
  • Network accessline 61
    import { Hono } from 'https://esm.sh/hono@3'
  • Network accessline 63
    export default {   async fetch(request) {
  • Network accessline 64
    async fetch(request) {
  • Network accessline 65
    const app = new Hono()     app.get('/', (c) => c.text('Hello Hono!'))     return app.fetch(request)
  • Network accessline 66
    app.get('/', (c) => c.text('Hello Hono!'))     return app.fetch(request)   },
  • Network accessline 67
    return app.fetch(request)
  • Network accessline 128
    - [Cloudflare Workers Docs](https://developers.cloudflare.com/workers/)
  • Network accessline 129
    - [Workers Examples](https://developers.cloudflare.com/workers/examples/)
  • Network accessline 130
    - [Wrangler CLI](https://developers.cloudflare.com/workers/wrangler/)
  • Network accessline 131
    - [Workers API Reference](https://developers.cloudflare.com/workers/runtime-apis/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-playground/api.md

  • Network accessline 6
    export default {   async fetch(request, env, ctx) {
  • Network accessline 7
    async fetch(request, env, ctx) {
  • Network accessline 52
    // Background work (after response sent) ctx.waitUntil(fetch('https://logs.example.com', { method: 'POST', body: '...' }))
  • Network accessline 53
    ctx.waitUntil(fetch('https://logs.example.com', { method: 'POST', body: '...' }))
  • Network accessline 60
    const response = await fetch('https://api.example.com')
  • Network accessline 63
    // With options await fetch(url, {
  • Network accessline 64
    await fetch(url, {
  • Network accessline 77
    let response = await cache.match(request) if (!response) {   response = await fetch(origin)
  • Network accessline 78
    if (!response) {   response = await fetch(origin)   await cache.put(request, response.clone()) // Clone before put!
  • Network accessline 79
    response = await fetch(origin)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-playground/configuration.md

  • Network accessline 5
    Navigate to [workers.cloudflare.com/playground](https://workers.cloudflare.com/playground)
  • Network accessline 35
    export default {   async fetch(request, env, ctx) {
  • Network accessline 36
    async fetch(request, env, ctx) {
  • Network accessline 54
    // Import from CDN import { Hono } from 'https://esm.sh/hono@3'
  • Network accessline 55
    import { Hono } from 'https://esm.sh/hono@3'
  • Network accessline 60
    export default {   async fetch(request) {
  • Network accessline 61
    async fetch(request) {
  • Network accessline 62
    const app = new Hono()     app.get('/', (c) => c.text('Hello'))     return app.fetch(request)
  • Network accessline 63
    app.get('/', (c) => c.text('Hello'))     return app.fetch(request)   },
  • Network accessline 64
    return app.fetch(request)
  • Network accessline 113
    Example: `https://workers.cloudflare.com/playground#abc123...`

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-playground/gotchas.md

  • Network accessline 17
    // ❌ Body consumed twice const body = await request.text() await fetch(url, { body: request.body }) // Error!
  • Network accessline 19
    await fetch(url, { body: request.body }) // Error!
  • Network accessline 22
    const clone = request.clone() const body = await request.text() await fetch(url, { body: clone.body })
  • Network accessline 24
    await fetch(url, { body: clone.body })
  • Network accessline 32
    // ✅ Move slow work to background ctx.waitUntil(fetch('https://analytics.example.com', {...}));
  • Network accessline 33
    ctx.waitUntil(fetch('https://analytics.example.com', {...}));
  • Network accessline 42
    // ❌ 100 individual fetches // ✅ Batch into single API call await fetch('https://api.example.com/batch', {
  • Network accessline 43
    // ✅ Batch into single API call await fetch('https://api.example.com/batch', {   body: JSON.stringify({ ids: [...] })
  • Network accessline 44
    await fetch('https://api.example.com/batch', {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-playground/patterns.md

  • Network accessline 6
    export default {   async fetch(request) {
  • Network accessline 7
    async fetch(request) {
  • Network accessline 26
    export default {   async fetch(request) {
  • Network accessline 27
    async fetch(request) {
  • Network accessline 37
    export default {   async fetch(request) {
  • Network accessline 38
    async fetch(request) {
  • Network accessline 39
    const url = new URL(request.url)     url.hostname = 'api.example.com'     return fetch(url.toString(), {
  • Network accessline 40
    url.hostname = 'api.example.com'     return fetch(url.toString(), {       method: request.method,
  • Network accessline 41
    return fetch(url.toString(), {
  • Network accessline 53
    export default {   async fetch(request) {
  • Network accessline 54
    async fetch(request) {
  • Network accessline 62
    })     }     const response = await fetch('https://api.example.com', request)
  • Network accessline 63
    }     const response = await fetch('https://api.example.com', request)     const modified = new Response(response.body, response)
  • Network accessline 64
    const response = await fetch('https://api.example.com', request)
  • Network accessline 75
    export default {   async fetch(request) {
  • Network accessline 76
    async fetch(request) {
  • Network accessline 77
    if (request.method !== 'GET') return fetch(request)
  • Network accessline 79
    let response = await cache.match(request)     if (!response) {       response = await fetch('https://api.example.com')
  • Network accessline 80
    if (!response) {       response = await fetch('https://api.example.com')       if (response.status === 200) await cache.put(request, response.clone())
  • Network accessline 81
    response = await fetch('https://api.example.com')
  • Network accessline 92
    import { Hono } from 'https://esm.sh/hono@3'
  • Network accessline 103
    export default {   async fetch(request) {
  • Network accessline 104
    async fetch(request) {
  • Network accessline 121
    export default {   async fetch(request) {
  • Network accessline 122
    async fetch(request) {
  • Network accessline 123
    try {       const response = await fetch('https://api.example.com')       if (!response.ok) throw new Error(`API returned ${response.status}`)
  • Network accessline 124
    const response = await fetch('https://api.example.com')

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-vpc/README.md

  • Network accessline 41
    - ❌ You just need HTTP/HTTPS (use `fetch()` or VPC Services)
  • Network accessline 50
    export default {   async fetch(req: Request): Promise<Response> {
  • Network accessline 51
    async fetch(req: Request): Promise<Response> {
  • Network accessline 111
    2. **Validate destinations** - Prevent SSRF by allowlisting hosts 3. **Use Hyperdrive for databases** - Better performance than raw TCP 4. **Prefer fetch() for HTTP** - Only use TCP when necessary
  • Network accessline 112
    3. **Use Hyperdrive for databases** - Better performance than raw TCP 4. **Prefer fetch() for HTTP** - Only use TCP when necessary 5. **Combine with Smart Placement** - Reduce latency to private networks
  • Network accessline 113
    4. **Prefer fetch() for HTTP** - Only use TCP when necessary
  • Network accessline 125
    - [TCP Sockets API Documentation](https://developers.cloudflare.com/workers/runtime-apis/tcp-sockets/)
  • Network accessline 126
    - [Connect to databases guide](https://developers.cloudflare.com/workers/tutorials/connect-to-postgres/)
  • Network accessline 127
    - [Cloudflare Tunnel setup](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-vpc/api.md

  • Network accessline 155
    export default {   async fetch(req: Request): Promise<Response> {
  • Network accessline 156
    async fetch(req: Request): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-vpc/configuration.md

  • Network accessline 35
    export default {   async fetch(req: Request, env: Env): Promise<Response> {
  • Network accessline 36
    async fetch(req: Request, env: Env): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-vpc/gotchas.md

  • Network accessline 42
    **Solution:** Create inside handler: `export default { async fetch() { const socket = connect(...); } }`
  • Network accessline 156
    | ------------------------- | ---------------------------- | --------------------------- | | PostgreSQL/MySQL          | [Hyperdrive](../hyperdrive/) | Connection pooling, caching | | HTTP/HTTPS                | `fetch()`                   
  • Network accessline 157
    | PostgreSQL/MySQL          | [Hyperdrive](../hyperdrive/) | Connection pooling, caching | | HTTP/HTTPS                | `fetch()`                    | Simpler, built-in           | | HTTP with SSRF protection | VPC Services (beta 2025+)   
  • Network accessline 158
    | HTTP/HTTPS                | `fetch()`                    | Simpler, built-in           |

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-vpc/patterns.md

  • Network accessline 143
    export default {   async fetch(req: Request): Promise<Response> {
  • Network accessline 144
    async fetch(req: Request): Promise<Response> {
  • Network accessline 208
    export default {   async fetch(req: Request): Promise<Response> {
  • Network accessline 209
    async fetch(req: Request): Promise<Response> {

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/README.md

  • Network accessline 19
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 20
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Access to secretsline 40
    [Credential-related source omitted]
  • Network accessline 65
    // HTTP requests async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response>
  • Network accessline 66
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response>
  • Network accessline 80
    **Docs**: https://developers.cloudflare.com/workers/
  • Network accessline 81
    **Examples**: https://developers.cloudflare.com/workers/examples/
  • Network accessline 82
    **Runtime APIs**: https://developers.cloudflare.com/workers/runtime-apis/

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/api.md

  • Network accessline 6
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 7
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 13
    })     }     return fetch(request) // Subrequest to origin
  • Network accessline 14
    }     return fetch(request) // Subrequest to origin   },
  • Network accessline 15
    return fetch(request) // Subrequest to origin
  • Access to secretsline 52
    [Credential-related source omitted]
  • Network accessline 61
    if (!response) {   response = await fetch(request)
  • Network accessline 62
    response = await fetch(request)
  • Network accessline 156
    async fetch(request: Request): Promise<Response> {
  • Network accessline 161
    return new Response(String(this.value)); } // Usage: await stub.fetch('http://x/increment')
  • Network accessline 163
    // Usage: await stub.fetch('http://x/increment')
  • Network accessline 179
    // Worker-to-worker RPC (zero latency, no internet round-trip) return env.SERVICE_B.fetch(request)
  • Network accessline 180
    return env.SERVICE_B.fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/configuration.md

  • Access to secretsline 76
    [Credential-related source omitted]
  • Access to secretsline 79
    [Credential-related source omitted]
  • Network accessline 127
    export default {   async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Network accessline 128
    async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
  • Access to secretsline 143
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/frameworks.md

  • Network accessline 101
    export default {   fetch(request: Request, env: Env, ctx: ExecutionContext) {
  • Network accessline 102
    fetch(request: Request, env: Env, ctx: ExecutionContext) {
  • Network accessline 103
    return app.fetch(request, env, ctx)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/gotchas.md

  • Network accessline 63
    **Cause:** Using old `stub.fetch()` pattern instead of RPC (2024+)
  • Network accessline 67
    // ❌ Old fetch pattern export class MyDO {   async fetch(request: Request) {
  • Network accessline 68
    export class MyDO {   async fetch(request: Request) {     const { method } = await request.json()
  • Network accessline 69
    async fetch(request: Request) {
  • Network accessline 76
    } const stub = env.DO.get(id) const res = await stub.fetch('http://x', { method: 'POST', body: JSON.stringify({ method: 'increment' }) })
  • Network accessline 78
    const res = await stub.fetch('http://x', { method: 'POST', body: JSON.stringify({ method: 'increment' }) })

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/patterns.md

  • Network accessline 15
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 16
    async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 86
    // ❌ Sequential const user = await fetch('/api/user/1')
  • Network accessline 87
    const user = await fetch('/api/user/1')
  • Network accessline 88
    const posts = await fetch('/api/posts?user=1')
  • Network accessline 90
    // ✅ Parallel const [user, posts] = await Promise.all([fetch('/api/user/1'), fetch('/api/posts?user=1')])
  • Network accessline 91
    const [user, posts] = await Promise.all([fetch('/api/user/1'), fetch('/api/posts?user=1')])
  • Network accessline 129
    describe('Worker', () => {   it('returns 200', async () => {     const req = new Request('http://localhost/')
  • Network accessline 130
    it('returns 200', async () => {     const req = new Request('http://localhost/')     const env = { MY_VAR: 'test' }
  • Network accessline 131
    const req = new Request('http://localhost/')
  • Network accessline 132
    const env = { MY_VAR: 'test' }     const ctx = { waitUntil: () => {}, passThroughOnException: () => {} }     expect((await worker.fetch(req, env, ctx)).status).toBe(200)
  • Network accessline 133
    const ctx = { waitUntil: () => {}, passThroughOnException: () => {} }     expect((await worker.fetch(req, env, ctx)).status).toBe(200)   })
  • Network accessline 134
    expect((await worker.fetch(req, env, ctx)).status).toBe(200)
  • Network accessline 203
    async run(event: WorkflowEvent<{ userId: string }>, step: WorkflowStep) {     const user = await step.do('fetch-user', async () =>       fetch(`/api/users/${event.payload.userId}`).then((r) => r.json()),
  • Network accessline 204
    const user = await step.do('fetch-user', async () =>       fetch(`/api/users/${event.payload.userId}`).then((r) => r.json()),     )
  • Network accessline 205
    fetch(`/api/users/${event.payload.userId}`).then((r) => r.json()),

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workflows/api.md

  • Network accessline 64
    // From Worker export default {   async fetch(req, env) {
  • Network accessline 65
    export default {   async fetch(req, env) {     const instance = await env.MY_WORKFLOW.create({ id: crypto.randomUUID(), params: { userId: 'user123' } })
  • Network accessline 66
    async fetch(req, env) {
  • Network accessline 105
    await step.do('validate', async () => {   if (!event.params.paymentMethod) throw new NonRetryableError('Payment method required')   const res = await fetch('https://api.example.com/charge', { method: 'POST' })
  • Network accessline 106
    if (!event.params.paymentMethod) throw new NonRetryableError('Payment method required')   const res = await fetch('https://api.example.com/charge', { method: 'POST' })   if (res.status === 401) throw new NonRetryableError('Invalid credentia
  • Network accessline 107
    const res = await fetch('https://api.example.com/charge', { method: 'POST' })
  • Network accessline 122
    // Idempotency await step.do('charge', async () => {   const sub = await fetch(`https://api/subscriptions/${id}`).then((r) => r.json())
  • Network accessline 123
    await step.do('charge', async () => {   const sub = await fetch(`https://api/subscriptions/${id}`).then((r) => r.json())   if (sub.charged) return sub // Already done
  • Network accessline 124
    const sub = await fetch(`https://api/subscriptions/${id}`).then((r) => r.json())
  • Network accessline 125
    if (sub.charged) return sub // Already done   return await fetch(`https://api/subscriptions/${id}`, {     method: 'POST',
  • Network accessline 126
    return await fetch(`https://api/subscriptions/${id}`, {
  • Network accessline 217
    [Credential-related source omitted]
  • Network accessline 218
    [Credential-related source omitted]
  • Network accessline 220
    [Credential-related source omitted]
  • Network accessline 221
    [Credential-related source omitted]
  • Network accessline 223
    [Credential-related source omitted]
  • Network accessline 224
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workflows/configuration.md

  • Network accessline 43
    },   async () => {     const res = await fetch('https://api.example.com/data')
  • Network accessline 44
    async () => {     const res = await fetch('https://api.example.com/data')     if (!res.ok) throw new Error('Failed')
  • Network accessline 45
    const res = await fetch('https://api.example.com/data')
  • Access to secretsline 148
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workflows/gotchas.md

  • Network accessline 89
    - [Official Docs](https://developers.cloudflare.com/workflows/)
  • Network accessline 90
    - [Get Started Guide](https://developers.cloudflare.com/workflows/get-started/guide/)
  • Network accessline 91
    - [Workers API](https://developers.cloudflare.com/workflows/build/workers-api/)
  • Network accessline 92
    - [REST API](https://developers.cloudflare.com/api/resources/workflows/)
  • Network accessline 93
    - [Examples](https://developers.cloudflare.com/workflows/examples/)
  • Network accessline 94
    - [Limits](https://developers.cloudflare.com/workflows/reference/limits/)
  • Network accessline 95
    - [Pricing](https://developers.cloudflare.com/workflows/reference/pricing/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workflows/patterns.md

  • Network accessline 52
    { retries: { limit: 10, delay: '30s', backoff: 'exponential' } },       async () => {         const res = await fetch(event.params.sourceUrl)
  • Network accessline 53
    async () => {         const res = await fetch(event.params.sourceUrl)         if (!res.ok) throw new Error('Fetch failed')
  • Network accessline 54
    const res = await fetch(event.params.sourceUrl)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/wrangler/api.md

  • Network accessline 28
    it('responds with 200', async () => {     const response = await worker.fetch('http://example.com')
  • Network accessline 29
    const response = await worker.fetch('http://example.com')
  • Access to secretsline 71
    [Credential-related source omitted]
  • Network accessline 82
    // Platform APIs await caches.default.put('https://example.com', new Response('cached'))
  • Network accessline 83
    await caches.default.put('https://example.com', new Response('cached'))
  • Network accessline 165
    const response = await api.fetch('http://example.com/api/login')
  • Network accessline 166
    // API Worker calls AUTH Worker via env.AUTH.fetch()

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/wrangler/auth.md

  • Network accessline 29
    1. Go to: **https://dash.cloudflare.com/profile/api-tokens**
  • Access to secretsline 36
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/wrangler/configuration.md

  • Access to secretsline 15
    [Credential-related source omitted]
  • Network accessline 59
    // Variables { "vars": { "API_URL": "https://api.example.com" } }
  • Network accessline 60
    { "vars": { "API_URL": "https://api.example.com" } }
  • Network accessline 128
    export default {   async fetch(request, env) {
  • Network accessline 129
    async fetch(request, env) {
  • Network accessline 130
    // Try serving static asset first     const asset = await env.ASSETS.fetch(request)     if (asset.status !== 404) return asset
  • Network accessline 131
    const asset = await env.ASSETS.fetch(request)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/wrangler/gotchas.md

  • Network accessline 118
    **Cause:** Mock function not returning Response **Solution:** Always return Response, use `fetch(req)` for passthrough:
  • Network accessline 119
    **Solution:** Always return Response, use `fetch(req)` for passthrough:
  • Network accessline 125
    return new Response('mocked')     }     return fetch(req) // Required for non-mocked requests
  • Network accessline 126
    }     return fetch(req) // Required for non-mocked requests   },
  • Network accessline 127
    return fetch(req) // Required for non-mocked requests
  • Dangerous shell operationline 180
    rm -rf .wrangler/state     # Clear local state
  • Network accessline 201
    - Docs: https://developers.cloudflare.com/workers/wrangler/
  • Network accessline 202
    - Config: https://developers.cloudflare.com/workers/wrangler/configuration/
  • Network accessline 203
    - Commands: https://developers.cloudflare.com/workers/wrangler/commands/
  • Network accessline 204
    - Examples: https://github.com/cloudflare/workers-sdk/tree/main/templates
  • Network accessline 205
    - Discord: https://discord.gg/cloudflaredev

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/wrangler/patterns.md

  • Network accessline 89
    it('creates user', async () => {     const response = await worker.fetch('http://example.com/api/users', {
  • Network accessline 90
    const response = await worker.fetch('http://example.com/api/users', {
  • Network accessline 118
    it('fetches users', async () => {   const response = await SELF.fetch('https://example.com/api/users')
  • Network accessline 119
    const response = await SELF.fetch('https://example.com/api/users')
  • Network accessline 138
    // Test API calling AUTH const response = await apiWorker.fetch('http://example.com/api/protected')
  • Network accessline 139
    const response = await apiWorker.fetch('http://example.com/api/protected')
  • Network accessline 154
    })     }     return fetch(req) // Pass through other requests
  • Network accessline 155
    }     return fetch(req) // Pass through other requests   },
  • Network accessline 156
    return fetch(req) // Pass through other requests
  • Network accessline 160
    // Test Worker that calls external API const response = await worker.fetch('http://example.com/proxy')
  • Network accessline 161
    const response = await worker.fetch('http://example.com/proxy')
  • Network accessline 181
    export default {   async fetch(request: Request, env: Env): Promise<Response> {
  • Network accessline 182
    async fetch(request: Request, env: Env): Promise<Response> {
  • Access to secretsline 185
    [Credential-related source omitted]
  • Network accessline 195
    export default {   async fetch(request, env) {
  • Network accessline 196
    async fetch(request, env) {
  • Network accessline 199
    return Response.json({ data: 'from API' })     }     return env.ASSETS.fetch(request) // Static assets
  • Network accessline 200
    }     return env.ASSETS.fetch(request) // Static assets   },
  • Network accessline 201
    return env.ASSETS.fetch(request) // Static assets

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/zaraz/README.md

  • Network accessline 108
    - [Zaraz Docs](https://developers.cloudflare.com/zaraz/)
  • Network accessline 109
    - [Web API](https://developers.cloudflare.com/zaraz/web-api/)
  • Network accessline 110
    - [Managed Components](https://developers.cloudflare.com/zaraz/advanced/load-custom-managed-component/)

packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/zaraz/patterns.md

  • Network accessline 48
    export default {   async fetch(request, env) {
  • Network accessline 49
    async fetch(request, env) {

packages/skills-catalog/skills/(cloud)/netlify-deploy/LICENSE.txt

  • Network accessline 1
    Apache License Version 2.0, January 2004 http://www.apache.org/licenses/
  • Network accessline 3
    http://www.apache.org/licenses/
  • Network accessline 195
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(cloud)/netlify-deploy/SKILL.md

  • Access to secretsline 41
    [Credential-related source omitted]
  • Access to secretsline 71
    [Credential-related source omitted]
  • Network accessline 74
    Tokens can be generated at: https://app.netlify.com/user/applications#personal-access-tokens
  • Network accessline 93
    # If Git-based, extract remote URL # Format: https://github.com/username/repo or git@github.com:username/repo.git
  • Network accessline 94
    # Format: https://github.com/username/repo or git@github.com:username/repo.git
  • Network accessline 187
    # Try Git-based linking first git remote show origin npx netlify link --git-remote-url https://github.com/user/repo
  • Network accessline 189
    npx netlify link --git-remote-url https://github.com/user/repo
  • Network accessline 252
    - Netlify CLI Docs: https://docs.netlify.com/cli/get-started/
  • Network accessline 253
    - netlify.toml Reference: https://docs.netlify.com/configure-builds/file-based-configuration/

packages/skills-catalog/skills/(cloud)/netlify-deploy/references/cli-commands.md

  • Access to secretsline 95
    [Credential-related source omitted]
  • Network accessline 161
    - Full CLI documentation: https://docs.netlify.com/cli/get-started/
  • Network accessline 162
    - CLI GitHub repository: https://github.com/netlify/cli

packages/skills-catalog/skills/(cloud)/netlify-deploy/references/deployment-patterns.md

  • Network accessline 57
    1. Check authentication: `npx netlify status` 2. Get Git remote: `git remote show origin` 3. Extract URL (e.g., `https://github.com/user/repo.git`)
  • Network accessline 58
    2. Get Git remote: `git remote show origin` 3. Extract URL (e.g., `https://github.com/user/repo.git`) 4. Link by remote: `npx netlify link --git-remote-url <URL>`
  • Network accessline 59
    3. Extract URL (e.g., `https://github.com/user/repo.git`)
  • Network accessline 66
    git remote show origin # * remote origin #   Fetch URL: https://github.com/user/my-app.git
  • Network accessline 68
    #   Fetch URL: https://github.com/user/my-app.git
  • Network accessline 70
    npx netlify link --git-remote-url https://github.com/user/my-app.git
  • Network accessline 91
    npx netlify deploy # Draft deploy URL: https://507f1f77bcf86cd799439011-my-app.netlify.app
  • Network accessline 92
    # Draft deploy URL: https://507f1f77bcf86cd799439011-my-app.netlify.app
  • Access to secretsline 157
    [Credential-related source omitted]
  • Access to secretsline 160
    [Credential-related source omitted]
  • Network accessline 317
    - Netlify CLI Documentation: https://docs.netlify.com/cli/get-started/
  • Network accessline 318
    - Framework Integration Guides: https://docs.netlify.com/frameworks/
  • Network accessline 319
    - Build Configuration: https://docs.netlify.com/configure-builds/

packages/skills-catalog/skills/(cloud)/netlify-deploy/references/netlify-toml.md

  • Network accessline 98
    [[redirects]]   from = "/api/*"   to = "https://api.example.com/:splat"
  • Network accessline 99
    from = "/api/*"   to = "https://api.example.com/:splat"   status = 200
  • Network accessline 100
    to = "https://api.example.com/:splat"
  • Network accessline 174
    [plugins.inputs]     baseUrl = "https://example.com"
  • Network accessline 175
    baseUrl = "https://example.com"
  • Network accessline 258
    - Full configuration reference: https://docs.netlify.com/configure-builds/file-based-configuration/
  • Network accessline 259
    - Framework-specific guides: https://docs.netlify.com/frameworks/

packages/skills-catalog/skills/(cloud)/render-deploy/LICENSE.txt

  • Network accessline 1
    Apache License Version 2.0, January 2004 http://www.apache.org/licenses/
  • Network accessline 3
    http://www.apache.org/licenses/
  • Network accessline 195
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(cloud)/render-deploy/SKILL.md

  • Access to secretsline 39
    [Credential-related source omitted]
  • Access to secretsline 42
    [Credential-related source omitted]
  • Network accessline 49
    4. **When users need an API key**, provide this guidance:    - "Get your API key from: https://dashboard.render.com/u/*/settings#api-keys"
  • Network accessline 50
    - "Get your API key from: https://dashboard.render.com/u/*/settings#api-keys"
  • Access to secretsline 51
    [Credential-related source omitted]
  • Access to secretsline 55
    [Credential-related source omitted]
  • Network accessline 158
    - macOS: `brew install render` - Linux/macOS: `curl -fsSL https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh | sh`
  • Dangerous shell operationline 159
    - Linux/macOS: `curl -fsSL https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh | sh`
  • Network accessline 159
    - Linux/macOS: `curl -fsSL https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh | sh`
  • Network accessline 172
    https://dashboard.render.com/u/*/settings#api-keys
  • Access to secretsline 175
    [Credential-related source omitted]
  • Network accessline 179
    "mcpServers": {     "render": {       "url": "https://mcp.render.com/mcp",
  • Network accessline 180
    "render": {       "url": "https://mcp.render.com/mcp",       "headers": {
  • Network accessline 181
    "url": "https://mcp.render.com/mcp",
  • Access to secretsline 183
    [Credential-related source omitted]
  • Network accessline 199
    https://dashboard.render.com/u/*/settings#api-keys
  • Access to secretsline 202
    [Credential-related source omitted]
  • Network accessline 205
    [Credential-related source omitted]
  • Access to secretsline 205
    [Credential-related source omitted]
  • Network accessline 235
    [Credential-related source omitted]
  • Access to secretsline 235
    [Credential-related source omitted]
  • Access to secretsline 326
    [Credential-related source omitted]
  • Network accessline 380
    | SSH Format                        | HTTPS Format                      | | --------------------------------- | --------------------------------- | | `git@github.com:user/repo.git`    | `https://github.com/user/repo`    |
  • Network accessline 381
    | --------------------------------- | --------------------------------- | | `git@github.com:user/repo.git`    | `https://github.com/user/repo`    | | `git@gitlab.com:user/repo.git`    | `https://gitlab.com/user/repo`    |
  • Network accessline 382
    | `git@github.com:user/repo.git`    | `https://github.com/user/repo`    |
  • Network accessline 383
    | `git@gitlab.com:user/repo.git`    | `https://gitlab.com/user/repo`    |
  • Network accessline 384
    | `git@bitbucket.org:user/repo.git` | `https://bitbucket.org/user/repo` |
  • Network accessline 391
    https://dashboard.render.com/blueprint/new?repo=<REPOSITORY_URL>
  • Network accessline 397
    https://dashboard.render.com/blueprint/new?repo=https://github.com/username/repo-name

packages/skills-catalog/skills/(cloud)/render-deploy/references/blueprint-spec.md

  • Network accessline 336
    value: production   - key: API_URL     value: https://api.example.com
  • Network accessline 337
    - key: API_URL     value: https://api.example.com   - key: LOG_LEVEL
  • Network accessline 338
    value: https://api.example.com
  • Access to secretsline 365
    [Credential-related source omitted]
  • Network accessline 754
    - Official Blueprint Specification: https://render.com/docs/blueprint-spec
  • Network accessline 755
    - Render CLI Documentation: https://render.com/docs/cli
  • Network accessline 756
    - Environment Variables Guide: https://render.com/docs/environment-variables

packages/skills-catalog/skills/(cloud)/render-deploy/references/configuration-guide.md

  • Network accessline 20
    value: info   - key: API_URL     value: https://api.example.com
  • Network accessline 22
    value: https://api.example.com
  • Access to secretsline 33
    [Credential-related source omitted]
  • Access to secretsline 184
    [Credential-related source omitted]
  • Access to secretsline 213
    [Credential-related source omitted]
  • Network accessline 251
    port ENV.fetch("PORT") { 3000 }
  • Network accessline 252
    bind "tcp://0.0.0.0:#{ENV.fetch('PORT', 3000)}"
  • Access to secretsline 390
    [Credential-related source omitted]
  • Access to secretsline 400
    [Credential-related source omitted]
  • Network accessline 657
    - Service Types: [service-types.md](service-types.md) - Runtimes: [runtimes.md](runtimes.md) - Official Render Docs: https://render.com/docs
  • Network accessline 659
    - Official Render Docs: https://render.com/docs

packages/skills-catalog/skills/(cloud)/render-deploy/references/deployment-details.md

  • Network accessline 48
    value: production   - key: API_URL     value: https://api.example.com
  • Network accessline 50
    value: https://api.example.com
  • Access to secretsline 73
    [Credential-related source omitted]
  • Access to secretsline 99
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/render-deploy/references/direct-creation.md

  • Network accessline 17
    name: "my-api",   runtime: "node",  # or python, go, rust, ruby, elixir, docker   repo: "https://github.com/username/repo",
  • Network accessline 18
    runtime: "node",  # or python, go, rust, ruby, elixir, docker   repo: "https://github.com/username/repo",   branch: "main",  # optional, defaults to repo default branch
  • Network accessline 19
    repo: "https://github.com/username/repo",
  • Network accessline 34
    create_static_site(   name: "my-frontend",   repo: "https://github.com/username/repo",
  • Network accessline 35
    name: "my-frontend",   repo: "https://github.com/username/repo",   branch: "main",
  • Network accessline 36
    repo: "https://github.com/username/repo",
  • Network accessline 39
    publishPath: "dist",  # or build, public, out   envVars: [     {"key": "VITE_API_URL", "value": "https://api.example.com"}
  • Network accessline 40
    envVars: [     {"key": "VITE_API_URL", "value": "https://api.example.com"}   ]
  • Network accessline 41
    {"key": "VITE_API_URL", "value": "https://api.example.com"}
  • Network accessline 50
    name: "daily-cleanup",   runtime: "node",   repo: "https://github.com/username/repo",
  • Network accessline 51
    runtime: "node",   repo: "https://github.com/username/repo",   schedule: "0 0 * * *",  # Daily at midnight (cron syntax)
  • Network accessline 52
    repo: "https://github.com/username/repo",
  • Access to secretsline 91
    [Credential-related source omitted]

packages/skills-catalog/skills/(cloud)/render-deploy/references/service-types.md

  • Network accessline 22
    - **Public URL**: Automatically assigned `https://[service-name].onrender.com`
  • Access to secretsline 102
    [Credential-related source omitted]
  • Network accessline 389
    // Use .render-internal.com domain const API_URL = 'http://internal-api.render-internal.com:10000'
  • Network accessline 390
    const API_URL = 'http://internal-api.render-internal.com:10000'

packages/skills-catalog/skills/(cloud)/vercel-deploy/scripts/deploy.sh

  • Executable scriptline 1
    #!/bin/bash
  • Network accessline 9
    DEPLOY_ENDPOINT="https://deploy-skills.vercel.sh/api/deploy"
  • Dangerous shell operationline 175
    rm -rf "$TEMP_DIR"
  • Access to secretsline 201
    [Credential-related source omitted]
  • Access to secretsline 204
    [Credential-related source omitted]
  • Network accessline 238
    echo "Deploying..." >&2 RESPONSE=$(curl -s -X POST "$DEPLOY_ENDPOINT" -F "file=@$TARBALL" -F "framework=$FRAMEWORK")
  • Network accessline 239
    RESPONSE=$(curl -s -X POST "$DEPLOY_ENDPOINT" -F "file=@$TARBALL" -F "framework=$FRAMEWORK")
  • Network accessline 265
    while [ $ATTEMPT -lt $MAX_ATTEMPTS ]; do     HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "$PREVIEW_URL")
  • Network accessline 266
    HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "$PREVIEW_URL")

packages/skills-catalog/skills/(creation)/create-adr/README.md

  • Network accessline 264
    For issues or questions about this skill, refer to the main [agent-skills repository](https://github.com/tech-leads-club/agent-skills).

packages/skills-catalog/skills/(creation)/create-rfc/README.md

  • Network accessline 346
    For issues or questions about this skill, refer to the main [agent-skills repository](https://github.com/tech-leads-club/agent-skills).

packages/skills-catalog/skills/(creation)/create-technical-design-doc/README.md

  • Network accessline 411
    For issues or questions about this skill, refer to the main [agent-skills repository](https://github.com/tech-leads-club/agent-skills).

packages/skills-catalog/skills/(creation)/create-technical-design-doc/SKILL.md

  • Network accessline 74
    | **Diagrams**      | Sequence, architecture, flow  | Mermaid/PlantUML diagrams showing interactions                  | | **Structures**    | Log format, event schemas     | JSON structure for structured logging                           | 
  • Network accessline 76
    | **Strategies**    | Approach, not commands        | "Rollback via feature flag" (not the curl command)              |
  • Network accessline 96
    curl -X PATCH https://api.launchdarkly.com/flags/FEATURE_X \
  • Access to secretsline 97
    [Credential-related source omitted]
  • Network accessline 1477
    - [Google Engineering Practices](https://google.github.io/eng-practices/)
  • Network accessline 1478
    - [Google SRE Book](https://sre.google/sre-book/table-of-contents/)
  • Network accessline 1479
    - [OWASP Top 10](https://owasp.org/www-project-top-ten/)
  • Network accessline 1480
    - [Architecture Decision Records](https://adr.github.io/)

packages/skills-catalog/skills/(creation)/skill-architect/scripts/validate_skill.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(decision-making)/the-fool/SKILL.md

  • Network accessline 4
    license: CC-BY-4.0 metadata:   author: https://github.com/Jeffallan
  • Network accessline 5
    metadata:   author: https://github.com/Jeffallan   version: '2.0.0'
  • Network accessline 6
    author: https://github.com/Jeffallan

packages/skills-catalog/skills/(decision-making)/the-jury/scripts/tally.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(design)/figma-implement-design/LICENSE.txt

  • Network accessline 2
    Apache License                            Version 2.0, January 2004                         http://www.apache.org/licenses/
  • Network accessline 4
    http://www.apache.org/licenses/
  • Network accessline 196
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(design)/figma-implement-design/SKILL.md

  • Network accessline 17
    - Figma MCP server must be connected and accessible - User must provide a Figma URL in the format: `https://figma.com/design/:fileKey/:fileName?node-id=1-2`
  • Network accessline 18
    - User must provide a Figma URL in the format: `https://figma.com/design/:fileKey/:fileName?node-id=1-2`
  • Network accessline 32
    1. Add the Figma MCP server to your agent's MCP configuration:    - URL: `https://mcp.figma.com/mcp`
  • Network accessline 33
    - URL: `https://mcp.figma.com/mcp`
  • Network accessline 45
    **URL format:** `https://figma.com/design/:fileKey/:fileName?node-id=1-2`
  • Network accessline 56
    - URL: `https://figma.com/design/kL9xQn2VwM8pYrTb4ZcHjF/DesignSystem?node-id=42-15`
  • Network accessline 173
    User says: "Implement this Figma button component: https://figma.com/design/kL9xQn2VwM8pYrTb4ZcHjF/DesignSystem?node-id=42-15"
  • Network accessline 190
    User says: "Build this dashboard: https://figma.com/design/pR8mNv5KqXzGwY2JtCfL4D/Dashboard?node-id=10-5"
  • Network accessline 262
    - [Figma MCP Server Documentation](https://developers.figma.com/docs/figma-mcp-server/)
  • Network accessline 263
    - [Figma MCP Server Tools and Prompts](https://developers.figma.com/docs/figma-mcp-server/tools-and-prompts/)
  • Network accessline 264
    - [Figma Variables and Design Tokens](https://help.figma.com/hc/en-us/articles/15339657135383-Guide-to-variables-in-Figma)

packages/skills-catalog/skills/(design)/figma/LICENSE.txt

  • Network accessline 2
    Apache License                            Version 2.0, January 2004                         http://www.apache.org/licenses/
  • Network accessline 4
    http://www.apache.org/licenses/
  • Network accessline 196
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(design)/figma/references/figma-mcp-config.md

  • Network accessline 8
    [mcp_servers.figma] url = "https://mcp.figma.com/mcp"
  • Network accessline 9
    url = "https://mcp.figma.com/mcp"
  • Access to secretsline 23
    [Credential-related source omitted]
  • Access to secretsline 25
    [Credential-related source omitted]

packages/skills-catalog/skills/(design)/frontend-design/SKILL.md

  • Network accessline 5
    author: Impeccable (Paul Bakaus), based on Anthropic frontend-design   version: '1.0.0' source: https://github.com/pbakaus/impeccable
  • Network accessline 6
    version: '1.0.0' source: https://github.com/pbakaus/impeccable ---
  • Network accessline 7
    source: https://github.com/pbakaus/impeccable

packages/skills-catalog/skills/(design)/frontend-design/references/color-and-contrast.md

  • Network accessline 93
    - [WebAIM Contrast Checker](https://webaim.org/resources/contrastchecker/)
  • Network accessline 95
    - [Polypane](https://polypane.app/) for real-time testing

packages/skills-catalog/skills/(design)/frontend-design/references/typography.md

  • Network accessline 83
    Tools like [Fontaine](https://github.com/unjs/fontaine) calculate these overrides automatically.
  • Network accessline 114
    Check what features your font supports at [Wakamai Fondue](https://wakamaifondue.com/).

packages/skills-catalog/skills/(development)/confluence-assistant/SKILL.md

  • Network accessline 37
    1. Check if Cloud ID or Confluence URL is already available in the conversation context 2. If not found, ask: "Which Confluence site should I use? Please provide a Cloud ID (UUID) or site URL (e.g. `https://example.atlassian.net/`)"
  • Network accessline 38
    2. If not found, ask: "Which Confluence site should I use? Please provide a Cloud ID (UUID) or site URL (e.g. `https://example.atlassian.net/`)"
  • Network accessline 43
    - Can be a site URL (e.g., `https://example.atlassian.net/`)
  • Network accessline 64
    - **If you have ARI** (Atlassian Resource Identifier): `fetch(ari)`

packages/skills-catalog/skills/(development)/gh-address-comments/LICENSE.txt

  • Network accessline 2
    Apache License                            Version 2.0, January 2004                         http://www.apache.org/licenses/
  • Network accessline 4
    http://www.apache.org/licenses/
  • Network accessline 196
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(development)/gh-address-comments/scripts/fetch_comments.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/harness-eval/references/claims.schema.json

  • Network accessline 1
    {   "$schema": "https://json-schema.org/draft/2020-12/schema",
  • Network accessline 2
    "$schema": "https://json-schema.org/draft/2020-12/schema",

packages/skills-catalog/skills/(development)/harness-eval/scripts/doc_scope.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/harness-eval/scripts/inventory_extract.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/harness-eval/scripts/merge_agreement.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/harness-eval/scripts/merge_usefulness.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/harness-eval/scripts/slim_fanin.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/harness-eval/scripts/surfaces_extract.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/harness-eval/scripts/track_a_correctness.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/jira-assistant/README.md

  • Network accessline 11
    - **Project Key** - The Jira project key (e.g., `KAN`, `PROJ`, `DEV`) - **Cloud ID** - Your Atlassian Cloud ID (UUID format or site URL) - **URL** - Your Atlassian site URL (e.g., `https://example.atlassian.net/`)
  • Network accessline 13
    - **URL** - Your Atlassian site URL (e.g., `https://example.atlassian.net/`)
  • Network accessline 37
    - **Project Key:** YOUR_PROJECT_KEY - **Cloud ID:** your-cloud-id-uuid-or-url - **URL:** https://your-site.atlassian.net/
  • Network accessline 38
    - **Cloud ID:** your-cloud-id-uuid-or-url - **URL:** https://your-site.atlassian.net/ - **Project Name:** Your Project Name (optional)
  • Network accessline 39
    - **URL:** https://your-site.atlassian.net/
  • Network accessline 41
    - **Board URL:** https://your-site.atlassian.net/jira/software/projects/YOUR_PROJECT_KEY/boards/1 (optional)
  • Network accessline 51
    - **Project Key:** YOUR_PROJECT_KEY - **Cloud ID:** your-cloud-id-uuid-or-url - **URL:** https://your-site.atlassian.net/
  • Network accessline 52
    - **Cloud ID:** your-cloud-id-uuid-or-url - **URL:** https://your-site.atlassian.net/ - **Project Name:** Your Project Name (optional)
  • Network accessline 53
    - **URL:** https://your-site.atlassian.net/
  • Network accessline 55
    - **Board URL:** https://your-site.atlassian.net/jira/software/projects/YOUR_PROJECT_KEY/boards/1 (optional)
  • Network accessline 97
    - **Project Key:** KAN - **Cloud ID:** d58e860b-469d-4463-8f46-684934a5a851 - **URL:** https://techleadsclub.atlassian.net/
  • Network accessline 98
    - **Cloud ID:** d58e860b-469d-4463-8f46-684934a5a851 - **URL:** https://techleadsclub.atlassian.net/ - **Project Name:** Tech Leads Club
  • Network accessline 99
    - **URL:** https://techleadsclub.atlassian.net/
  • Network accessline 101
    - **Board URL:** https://techleadsclub.atlassian.net/jira/software/projects/KAN/boards/1

packages/skills-catalog/skills/(development)/jira-assistant/SKILL.md

  • Network accessline 81
    - **If you have ARI**: `fetch(ari)`

packages/skills-catalog/skills/(development)/nestjs-modular-monolith/references/authentication.md

  • Access to secretsline 213
    [Credential-related source omitted]
  • Access to secretsline 217
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/nestjs-modular-monolith/references/stack-configuration.md

  • Network accessline 298
    {   "$schema": "https://biomejs.dev/schemas/1.9.0/schema.json",
  • Network accessline 299
    "$schema": "https://biomejs.dev/schemas/1.9.0/schema.json",

packages/skills-catalog/skills/(development)/nestjs-modular-monolith/references/testing-patterns.md

  • Access to secretsline 279
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/nestjs-modular-monolith/scripts/validate-isolation.sh

  • Executable scriptline 1
    #!/bin/bash

packages/skills-catalog/skills/(development)/rails-dev/SKILL.md

  • Network accessline 205
    - [basecamp/fizzy](https://github.com/basecamp/fizzy)
  • Network accessline 206
    - [railswhey/app](https://github.com/railswhey/app)

packages/skills-catalog/skills/(development)/rails-dev/references/async.md

  • Network accessline 13
    Sync do   feeds.map do |feed|     Async { results << [feed, fetch(feed.url)] }
  • Network accessline 14
    feeds.map do |feed|     Async { results << [feed, fetch(feed.url)] }   end.each(&:wait)
  • Network accessline 15
    Async { results << [feed, fetch(feed.url)] }
  • Network accessline 27
    # Don't: a DB write inside the fiber shares one connection Sync do   feeds.map { |feed| Async { feed.save_entries(fetch(feed.url)) } }.each(&:wait)
  • Network accessline 28
    Sync do   feeds.map { |feed| Async { feed.save_entries(fetch(feed.url)) } }.each(&:wait) end
  • Network accessline 29
    feeds.map { |feed| Async { feed.save_entries(fetch(feed.url)) } }.each(&:wait)
  • Network accessline 33
    fetched = [] Sync do   feeds.map { |feed| Async { fetched << [feed, fetch(feed.url)] } }.each(&:wait)
  • Network accessline 34
    Sync do   feeds.map { |feed| Async { fetched << [feed, fetch(feed.url)] } }.each(&:wait) end
  • Network accessline 35
    feeds.map { |feed| Async { fetched << [feed, fetch(feed.url)] } }.each(&:wait)

packages/skills-catalog/skills/(development)/rails-dev/references/caching.md

  • Network accessline 90
    def statistics   Rails.cache.fetch([self, "statistics", cache_version], expires_in: 1.hour,
  • Network accessline 91
    Rails.cache.fetch([self, "statistics", cache_version], expires_in: 1.hour,

packages/skills-catalog/skills/(development)/rails-dev/references/concerns.md

  • Access to secretsline 163
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/rails-dev/references/jobs.md

  • Network accessline 130
    Full API: <https://api.rubyonrails.org/classes/ActiveJob/Continuation.html>.

packages/skills-catalog/skills/(development)/rails-dev/references/mailer.md

  • Network accessline 81
    # test/mailers/previews/session_mailer_preview.rb # Preview at http://localhost:3000/rails/mailers/session_mailer
  • Network accessline 82
    # Preview at http://localhost:3000/rails/mailers/session_mailer

packages/skills-catalog/skills/(development)/rails-dev/references/test.md

  • Access to secretsline 53
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/rails-dev/references/validator.md

  • Network accessline 55
    private     def allowed_schemes = options.fetch(:schemes, DEFAULT_SCHEMES)
  • Network accessline 56
    def allowed_schemes = options.fetch(:schemes, DEFAULT_SCHEMES)

packages/skills-catalog/skills/(development)/rails-dev/references/webhooks.md

  • Network accessline 139
    When you can't re-fetch (no API, or the payload *is* the event), converge regardless of order with two markers:

packages/skills-catalog/skills/(development)/react-native-expert/SKILL.md

  • Network accessline 210
    - **Modals:** Use native `<Modal presentationStyle="formSheet">` or React Navigation v7 `presentation: 'formSheet'` with `sheetAllowedDetents`. Avoid JS-based bottom sheet libraries. - **Menus:** Use [zeego](https://zeego.dev) for native dr
  • Network accessline 211
    - **Menus:** Use [zeego](https://zeego.dev) for native dropdown and context menus. Never build custom JS menus.

packages/skills-catalog/skills/(development)/react-native-expert/references/expo-router.md

  • Network accessline 179
    "expo-router",         {           "origin": "https://acme.com",
  • Network accessline 180
    {           "origin": "https://acme.com",           "asyncRoutes": {
  • Network accessline 181
    "origin": "https://acme.com",

packages/skills-catalog/skills/(development)/react-native-expert/references/performance-rules.md

  • Network accessline 688
    1. [React Native](https://reactnative.dev)
  • Network accessline 689
    2. [Expo](https://docs.expo.dev)
  • Network accessline 690
    3. [Reanimated](https://docs.swmansion.com/react-native-reanimated)
  • Network accessline 691
    4. [Gesture Handler](https://docs.swmansion.com/react-native-gesture-handler)
  • Network accessline 692
    5. [LegendList](https://legendapp.com/open-source/legend-list)
  • Network accessline 693
    6. [Galeria](https://github.com/nandorojo/galeria)
  • Network accessline 694
    7. [Zeego](https://zeego.dev)
  • Network accessline 695
    8. [React Compiler](https://react.dev/learn/react-compiler)

packages/skills-catalog/skills/(development)/react-native-expert/references/project-structure.md

  • Network accessline 84
    "expo-router",         {           "origin": "https://myapp.com",
  • Network accessline 85
    {           "origin": "https://myapp.com",           "asyncRoutes": {
  • Network accessline 86
    "origin": "https://myapp.com",

packages/skills-catalog/skills/(development)/react-native-expert/references/storage-patterns.md

  • Access to secretsline 133
    [Credential-related source omitted]
  • Access to secretsline 139
    [Credential-related source omitted]
  • Access to secretsline 142
    [Credential-related source omitted]
  • Access to secretsline 145
    [Credential-related source omitted]
  • Access to secretsline 159
    [Credential-related source omitted]
  • Access to secretsline 165
    [Credential-related source omitted]
  • Access to secretsline 170
    [Credential-related source omitted]
  • Access to secretsline 220
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/shopify-developer/SKILL.md

  • Network accessline 13
    | ---------------- | ------------------------------------------------------------------- | | API version      | `2026-01` (stable)                                                  | | GraphQL Admin    | `POST https://{store}.myshopify.com/a
  • Network accessline 14
    | API version      | `2026-01` (stable)                                                  | | GraphQL Admin    | `POST https://{store}.myshopify.com/admin/api/2026-01/graphql.json` | | Storefront API   | `POST https://{store}.myshopify.com/a
  • Network accessline 15
    | GraphQL Admin    | `POST https://{store}.myshopify.com/admin/api/2026-01/graphql.json` |
  • Network accessline 16
    | Storefront API   | `POST https://{store}.myshopify.com/api/2026-01/graphql.json`       |
  • Network accessline 20
    | App dev          | `shopify app dev`                                                   | | Deploy           | `shopify app deploy`                                                | | Docs             | [shopify.dev](https://shopify.dev)   
  • Network accessline 22
    | Docs             | [shopify.dev](https://shopify.dev)                                  |
  • Network accessline 98
    // GraphQL Admin - always use GraphQL over REST const response = await fetch(`https://${store}.myshopify.com/admin/api/2026-01/graphql.json`, {
  • Network accessline 99
    const response = await fetch(`https://${store}.myshopify.com/admin/api/2026-01/graphql.json`, {
  • Network accessline 110
    // Ajax API (theme-only cart operations) fetch('/cart/add.js', {
  • Network accessline 111
    fetch('/cart/add.js', {

packages/skills-catalog/skills/(development)/shopify-developer/references/api-admin.md

  • Network accessline 9
    POST https://{store}.myshopify.com/admin/api/2026-01/graphql.json
  • Network accessline 107
    const response = await fetch(
  • Network accessline 108
    `https://${store}.myshopify.com/admin/api/2026-01/graphql.json`,
  • Network accessline 196
    https://{store}.myshopify.com/admin/api/2026-01/
  • Network accessline 212
    // JavaScript const response = await fetch(
  • Network accessline 213
    const response = await fetch(
  • Network accessline 214
    `https://${store}.myshopify.com/admin/api/2026-01/products.json?limit=50`,
  • Network accessline 275
    GET https://{shop}.myshopify.com/admin/oauth/authorize?
  • Access to secretsline 276
    [Credential-related source omitted]
  • Network accessline 323
    [Credential-related source omitted]
  • Access to secretsline 323
    [Credential-related source omitted]
  • Access to secretsline 327
    [Credential-related source omitted]
  • Access to secretsline 328
    [Credential-related source omitted]
  • Access to secretsline 334
    [Credential-related source omitted]
  • Network accessline 338
    // Node.js example async function getAccessToken(shop, code, apiKey, apiSecret) {   const response = await fetch(
  • Network accessline 339
    async function getAccessToken(shop, code, apiKey, apiSecret) {   const response = await fetch(     `https://${shop}/admin/oauth/access_token`,
  • Network accessline 340
    const response = await fetch(
  • Network accessline 341
    [Credential-related source omitted]
  • Access to secretsline 341
    [Credential-related source omitted]
  • Access to secretsline 347
    [Credential-related source omitted]
  • Access to secretsline 353
    [Credential-related source omitted]
  • Access to secretsline 354
    [Credential-related source omitted]
  • Network accessline 369
    const response = await fetch(graphqlEndpoint, options);
  • Network accessline 384
    async function fetchWithRetry(url, options, maxRetries = 3) {   for (let i = 0; i < maxRetries; i++) {     const response = await fetch(url, options);
  • Network accessline 386
    const response = await fetch(url, options);
  • Network accessline 466
    "topic": "ORDERS_CREATE",     "webhookSubscription": {       "callbackUrl": "https://your-app.com/webhooks/orders",
  • Network accessline 467
    "webhookSubscription": {       "callbackUrl": "https://your-app.com/webhooks/orders",       "format": "JSON"
  • Network accessline 468
    "callbackUrl": "https://your-app.com/webhooks/orders",
  • Network accessline 528
    const response = await fetch(endpoint, {
  • Network accessline 554
    async function safeApiCall(query, variables) {   try {     const response = await fetch(endpoint, {
  • Network accessline 555
    try {     const response = await fetch(endpoint, {       method: 'POST',
  • Network accessline 556
    const response = await fetch(endpoint, {

packages/skills-catalog/skills/(development)/shopify-developer/references/api-storefront.md

  • Network accessline 9
    POST https://{store}.myshopify.com/api/2026-01/graphql.json
  • Network accessline 147
    fetch('/cart.js')
  • Network accessline 159
    fetch('/cart/add.js', {
  • Network accessline 182
    fetch('/cart/change.js', {
  • Network accessline 196
    fetch('/cart/clear.js', { method: 'POST' })
  • Network accessline 203
    fetch('/cart/update.js', {
  • Network accessline 224
    POST https://{store}.myshopify.com/account/customer/api/2026-01/graphql
  • Network accessline 233
    **Note:** This API uses a different authentication flow via customer access tokens. See [Shopify docs](https://shopify.dev/docs/api/customer) for implementation details.

packages/skills-catalog/skills/(development)/shopify-developer/references/app-development.md

  • Network accessline 53
    name = "my-app" client_id = "your-client-id" application_url = "https://your-app.com"
  • Network accessline 54
    client_id = "your-client-id" application_url = "https://your-app.com" embedded = true
  • Network accessline 55
    application_url = "https://your-app.com"
  • Network accessline 62
    [auth] redirect_urls = [   "https://your-app.com/auth/callback",
  • Network accessline 63
    redirect_urls = [   "https://your-app.com/auth/callback",   "https://your-app.com/auth/shopify/callback"
  • Network accessline 64
    "https://your-app.com/auth/callback",
  • Network accessline 65
    "https://your-app.com/auth/shopify/callback"
  • Network accessline 84
    # Server starts with: # - Local development URL: http://localhost:3000
  • Network accessline 85
    # - Local development URL: http://localhost:3000
  • Network accessline 86
    # - Public tunnel URL: https://random-subdomain.ngrok.io
  • Access to secretsline 102
    [Credential-related source omitted]
  • Network accessline 104
    SCOPES=write_products,read_orders HOST=your-app-domain.com SHOPIFY_APP_URL=https://your-app.com
  • Network accessline 105
    HOST=your-app-domain.com SHOPIFY_APP_URL=https://your-app.com DATABASE_URL=postgresql://...
  • Network accessline 106
    SHOPIFY_APP_URL=https://your-app.com
  • Network accessline 330
    onPress: async () => {       // Call your app API       const response = await fetch("/api/export", {
  • Network accessline 331
    // Call your app API       const response = await fetch("/api/export", {         method: "POST",
  • Network accessline 332
    const response = await fetch("/api/export", {
  • Network accessline 398
    // Fetch and render reviews   // Note: In production, sanitise HTML to prevent XSS vulnerabilities   fetch(`/apps/reviews/api/reviews?product_id={{ product.id }}&limit={{ block.settings.reviews_to_show }}`)
  • Network accessline 399
    // Note: In production, sanitise HTML to prevent XSS vulnerabilities   fetch(`/apps/reviews/api/reviews?product_id={{ product.id }}&limit={{ block.settings.reviews_to_show }}`)     .then(r => r.json())
  • Network accessline 400
    fetch(`/apps/reviews/api/reviews?product_id={{ product.id }}&limit={{ block.settings.reviews_to_show }}`)
  • Access to secretsline 513
    [Credential-related source omitted]
  • Access to secretsline 514
    [Credential-related source omitted]
  • Network accessline 553
    Subpath prefix: apps Subpath: reviews Proxy URL: https://your-app.com/api/proxy
  • Network accessline 555
    Proxy URL: https://your-app.com/api/proxy
  • Network accessline 561
    https://store.com/apps/reviews → proxies to → https://your-app.com/api/proxy
  • Access to secretsline 723
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/shopify-developer/references/debugging.md

  • Network accessline 104
    // Time operations console.time('API Call'); await fetch('/api/data');
  • Network accessline 105
    console.time('API Call'); await fetch('/api/data'); console.timeEnd('API Call');
  • Network accessline 106
    await fetch('/api/data');
  • Network accessline 124
    // ❌ Unhandled error const data = await fetch('/api/data').then(r => r.json());
  • Network accessline 125
    const data = await fetch('/api/data').then(r => r.json());
  • Network accessline 127
    // ✅ Proper error handling try {   const response = await fetch('/api/data');
  • Network accessline 129
    const response = await fetch('/api/data');
  • Network accessline 182
    const response = await fetch(graphqlEndpoint, {
  • Network accessline 268
    // Check rate limit header const response = await fetch(graphqlEndpoint, options);
  • Network accessline 269
    const response = await fetch(graphqlEndpoint, options);
  • Network accessline 284
    const response = await fetch(`https://${shop}/admin/api/2026-01/products/999999.json`, {
  • Network accessline 309
    const response = await fetch(endpoint, {
  • Network accessline 341
    // ❌ Common mistake: Wrong variant ID fetch('/cart/add.js', {
  • Network accessline 342
    fetch('/cart/add.js', {
  • Network accessline 351
    // ✅ Fixed: Use variant ID fetch('/cart/add.js', {
  • Network accessline 352
    fetch('/cart/add.js', {
  • Network accessline 380
    // Debug current cart state fetch('/cart.js')
  • Network accessline 381
    fetch('/cart.js')
  • Access to secretsline 512
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/shopify-developer/references/hydrogen.md

  • Network accessline 12
    | Hosting | Shopify Oxygen (default) or any Node.js host | | CLI | `npx shopify hydrogen` | | Docs | [hydrogen.shopify.dev](https://hydrogen.shopify.dev) |
  • Network accessline 14
    | Docs | [hydrogen.shopify.dev](https://hydrogen.shopify.dev) |
  • Access to secretsline 43
    [Credential-related source omitted]
  • Access to secretsline 53
    [Credential-related source omitted]
  • Network accessline 315
    title: data.product.title,     description: data.product.description,     url: `https://store.com/products/${data.product.handle}`,
  • Network accessline 316
    description: data.product.description,     url: `https://store.com/products/${data.product.handle}`,     image: data.product.images.nodes[0]?.url,
  • Network accessline 317
    url: `https://store.com/products/${data.product.handle}`,

packages/skills-catalog/skills/(development)/shopify-developer/references/liquid-objects.md

  • Network accessline 10
    {{ shop.name }}              {# Store name #} {{ shop.url }}               {# Store URL (https://...) #}
  • Network accessline 11
    {{ shop.url }}               {# Store URL (https://...) #}

packages/skills-catalog/skills/(development)/shopify-developer/references/performance.md

  • Network accessline 152
    // Instead of: $.ajax() // Use: fetch()
  • Network accessline 153
    // Use: fetch()
  • Network accessline 357
    {# ❌ Blocking third-party script #} <script src="https://external.com/script.js"></script>
  • Network accessline 358
    <script src="https://external.com/script.js"></script>
  • Network accessline 360
    {# ✅ Async or defer #} <script src="https://external.com/script.js" async></script>
  • Network accessline 361
    <script src="https://external.com/script.js" async></script>
  • Network accessline 367
    if (gaLoaded) return;     const script = document.createElement('script');     script.src = 'https://www.googletagmanager.com/gtag/js?id=GA_ID';
  • Network accessline 368
    const script = document.createElement('script');     script.src = 'https://www.googletagmanager.com/gtag/js?id=GA_ID';     script.async = true;
  • Network accessline 369
    script.src = 'https://www.googletagmanager.com/gtag/js?id=GA_ID';
  • Network accessline 392
    const videoId = facade.dataset.videoId;     const iframe = document.createElement('iframe');     iframe.src = `https://www.youtube.com/embed/${videoId}?autoplay=1`;
  • Network accessline 393
    const iframe = document.createElement('iframe');     iframe.src = `https://www.youtube.com/embed/${videoId}?autoplay=1`;     facade.replaceWith(iframe);
  • Network accessline 394
    iframe.src = `https://www.youtube.com/embed/${videoId}?autoplay=1`;
  • Network accessline 434
    event.respondWith(     caches.match(event.request).then(response => {       return response || fetch(event.request);
  • Network accessline 435
    caches.match(event.request).then(response => {       return response || fetch(event.request);     })
  • Network accessline 436
    return response || fetch(event.request);

packages/skills-catalog/skills/(development)/shopify-developer/references/theme-development.md

  • Network accessline 454
    "theme_version": "1.0.0",     "theme_author": "Your Name",     "theme_documentation_url": "https://...",
  • Network accessline 455
    "theme_author": "Your Name",     "theme_documentation_url": "https://...",     "theme_support_url": "https://..."
  • Network accessline 456
    "theme_documentation_url": "https://...",
  • Network accessline 457
    "theme_support_url": "https://..."
  • Network accessline 574
    "id": "social_twitter",         "label": "Twitter URL",         "info": "https://twitter.com/username"
  • Network accessline 575
    "label": "Twitter URL",         "info": "https://twitter.com/username"       },
  • Network accessline 576
    "info": "https://twitter.com/username"
  • Network accessline 897
    "label": "Promo Video",   "accept": ["youtube", "vimeo"],   "placeholder": "https://www.youtube.com/watch?v=...",
  • Network accessline 898
    "accept": ["youtube", "vimeo"],   "placeholder": "https://www.youtube.com/watch?v=...",   "info": "YouTube or Vimeo URL"
  • Network accessline 899
    "placeholder": "https://www.youtube.com/watch?v=...",
  • Network accessline 1095
    "id": "twitter_url",   "label": "Twitter URL",   "placeholder": "https://twitter.com/username",
  • Network accessline 1096
    "label": "Twitter URL",   "placeholder": "https://twitter.com/username",   "info": "Your Twitter profile URL"
  • Network accessline 1097
    "placeholder": "https://twitter.com/username",

packages/skills-catalog/skills/(development)/tlc-implement/references/build.md

  • Network accessline 38
    Follow the repo's commit convention. Where it has none, use [Conventional Commits 1.0.0](https://www.conventionalcommits.org/en/v1.0.0/) and validate each
  • Network accessline 39
    [Conventional Commits 1.0.0](https://www.conventionalcommits.org/en/v1.0.0/) and validate each

packages/skills-catalog/skills/(development)/tlc-implement/scripts/check_commit.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 112
    print(f"  ERROR {e}")     if errors:         print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")
  • Network accessline 113
    if errors:         print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")         return 1
  • Network accessline 114
    print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")

packages/skills-catalog/skills/(development)/tlc-implement/scripts/check_proofs.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-implement/scripts/lean_config.py

  • Executable scriptline 1
    Executable file

packages/skills-catalog/skills/(development)/tlc-implement/scripts/lessons.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-implement/scripts/mutate.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Possible obfuscationline 92
    write_bytes(os.path.join(root, rel), base64.b64decode(b64))

packages/skills-catalog/skills/(development)/tlc-implement/scripts/runners.py

  • Executable scriptline 1
    Executable file
  • Dangerous shell operationline 205
    return bool(eval(" ".join(out), {"__builtins__": {}}, {}))  # only True/False/and/or/not/()

packages/skills-catalog/skills/(development)/tlc-implement/scripts/selftest.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Possible obfuscationline 207
    + width.to_bytes(4, "big") + height.to_bytes(4, "big") + b"\x08\x02\x00\x00\x00")
  • Network accessline 397
    1, "does not exist"),     ("validate_plan", "a design-file link where an exported capture belongs",      {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},
  • Network accessline 398
    ("validate_plan", "a design-file link where an exported capture belongs",      {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},      1, "is a link, not a capture"),
  • Network accessline 399
    {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},
  • Access to secretsline 494
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/tlc-implement/scripts/validate_checks.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-implement/scripts/validate_verification.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-plan/scripts/lean_config.py

  • Executable scriptline 1
    Executable file

packages/skills-catalog/skills/(development)/tlc-plan/scripts/lessons.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-plan/scripts/selftest.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Possible obfuscationline 207
    + width.to_bytes(4, "big") + height.to_bytes(4, "big") + b"\x08\x02\x00\x00\x00")
  • Network accessline 397
    1, "does not exist"),     ("validate_plan", "a design-file link where an exported capture belongs",      {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},
  • Network accessline 398
    ("validate_plan", "a design-file link where an exported capture belongs",      {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},      1, "is a link, not a capture"),
  • Network accessline 399
    {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},
  • Access to secretsline 494
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/tlc-plan/scripts/validate_plan.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-spec-driven/references/implement.md

  • Network accessline 185
    **Format:** the repo's commit convention; [Conventional Commits 1.0.0](https://www.conventionalcommits.org/en/v1.0.0/) when it has none - `<type>(<scope>): <description>`, imperative, lowercase, no period.

packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/check_commit.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 112
    print(f"  ERROR {e}")     if errors:         print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")
  • Network accessline 113
    if errors:         print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")         return 1
  • Network accessline 114
    print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")

packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/check_proofs.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/lean_config.py

  • Executable scriptline 1
    Executable file

packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/lessons.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/mutate.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Possible obfuscationline 92
    write_bytes(os.path.join(root, rel), base64.b64decode(b64))

packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/runners.py

  • Executable scriptline 1
    Executable file
  • Dangerous shell operationline 205
    return bool(eval(" ".join(out), {"__builtins__": {}}, {}))  # only True/False/and/or/not/()

packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/selftest.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Possible obfuscationline 207
    + width.to_bytes(4, "big") + height.to_bytes(4, "big") + b"\x08\x02\x00\x00\x00")
  • Network accessline 375
    1, "does not exist"),     ("validate_plan", "a design-file link where an exported capture belongs",      {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},
  • Network accessline 376
    ("validate_plan", "a design-file link where an exported capture belongs",      {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},      1, "is a link, not a capture"),
  • Network accessline 377
    {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},
  • Access to secretsline 475
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/validate_spec.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/validate_tasks.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/validate_verification.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-spec-lean/references/build.md

  • Network accessline 38
    Follow the repo's commit convention. Where it has none, use [Conventional Commits 1.0.0](https://www.conventionalcommits.org/en/v1.0.0/) and validate each
  • Network accessline 39
    [Conventional Commits 1.0.0](https://www.conventionalcommits.org/en/v1.0.0/) and validate each

packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/check_commit.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 112
    print(f"  ERROR {e}")     if errors:         print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")
  • Network accessline 113
    if errors:         print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")         return 1
  • Network accessline 114
    print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")

packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/check_proofs.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/lean_config.py

  • Executable scriptline 1
    Executable file

packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/lessons.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/mutate.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Possible obfuscationline 92
    write_bytes(os.path.join(root, rel), base64.b64decode(b64))

packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/runners.py

  • Executable scriptline 1
    Executable file
  • Dangerous shell operationline 205
    return bool(eval(" ".join(out), {"__builtins__": {}}, {}))  # only True/False/and/or/not/()

packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/selftest.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Possible obfuscationline 207
    + width.to_bytes(4, "big") + height.to_bytes(4, "big") + b"\x08\x02\x00\x00\x00")
  • Network accessline 397
    1, "does not exist"),     ("validate_plan", "a design-file link where an exported capture belongs",      {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},
  • Network accessline 398
    ("validate_plan", "a design-file link where an exported capture belongs",      {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},      1, "is a link, not a capture"),
  • Network accessline 399
    {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")},
  • Access to secretsline 494
    [Credential-related source omitted]

packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/validate_checks.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/validate_plan.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/validate_verification.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(gtm)/ai-cold-outreach/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/ai-pricing/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/ai-sdr/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/ai-seo/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 75
    [Credential-related source omitted]
  • Network accessline 77
    https://mcp.dataforseo.com/sse
  • Network accessline 82
    git clone https://github.com/AminForou/mcp-gsc

packages/skills-catalog/skills/(gtm)/ai-ugc-ads/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/content-to-pipeline/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/expansion-retention/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/gtm-engineering/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/gtm-metrics/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/lead-enrichment/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/multi-platform-launch/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/paid-creative-ai/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/partner-affiliate/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/positioning-icp/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/sales-motion-design/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/social-selling/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/solo-founder-gtm/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(gtm)/video-outreach/SKILL.md

  • Network accessline 5
    original_author: Chad Boyda / agent-gtm-skills   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills
  • Network accessline 6
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://github.com/chadboyda/agent-gtm-skills   version: '1.0.0'
  • Network accessline 7
    source: https://github.com/chadboyda/agent-gtm-skills

packages/skills-catalog/skills/(learning)/learning-opportunities/SKILL.md

  • Network accessline 6
    original_author: Chris Hicks   modified_by: Felipe Rodrigues - github.com/felipfr   source: https://www.fightforthehuman.com
  • Network accessline 7
    modified_by: Felipe Rodrigues - github.com/felipfr   source: https://www.fightforthehuman.com   version: 1.1.0
  • Network accessline 8
    source: https://www.fightforthehuman.com

packages/skills-catalog/skills/(monitoring)/sentry/LICENSE.txt

  • Network accessline 1
    Apache License Version 2.0, January 2004 http://www.apache.org/licenses/
  • Network accessline 3
    http://www.apache.org/licenses/
  • Network accessline 195
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(monitoring)/sentry/SKILL.md

  • Access to secretsline 3
    [Credential-related source omitted]
  • Access to secretsline 13
    [Credential-related source omitted]
  • Access to secretsline 14
    [Credential-related source omitted]
  • Network accessline 21
    [Credential-related source omitted]
  • Access to secretsline 23
    [Credential-related source omitted]

packages/skills-catalog/skills/(monitoring)/sentry/scripts/sentry_api.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 12
    DEFAULT_BASE_URL = "https://sentry.io"
  • Network accessline 160
    "--base-url",         default=os.environ.get("SENTRY_BASE_URL", DEFAULT_BASE_URL),         help="Sentry base URL (default: https://sentry.io)",
  • Network accessline 161
    [Credential-related source omitted]
  • Access to secretsline 161
    [Credential-related source omitted]
  • Network accessline 162
    help="Sentry base URL (default: https://sentry.io)",
  • Access to secretsline 166
    [Credential-related source omitted]
  • Access to secretsline 171
    [Credential-related source omitted]
  • Access to secretsline 210
    [Credential-related source omitted]
  • Access to secretsline 212
    [Credential-related source omitted]

packages/skills-catalog/skills/(performance)/core-web-vitals/SKILL.md

  • Network accessline 70
    // ❌ Content loads after JavaScript useEffect(() => {   fetch('/api/hero-text')
  • Network accessline 71
    useEffect(() => {   fetch('/api/hero-text')     .then((r) => r.json())
  • Network accessline 72
    fetch('/api/hero-text')
  • Network accessline 181
    // ❌ Eagerly loaded, blocks interactions ;<script src="https://heavy-widget.com/widget.js"></script>
  • Network accessline 182
    ;<script src="https://heavy-widget.com/widget.js"></script>
  • Network accessline 184
    // ✅ Lazy loaded on interaction or visibility const loadWidget = () => {   import('https://heavy-widget.com/widget.js').then((widget) => widget.init())
  • Network accessline 185
    const loadWidget = () => {   import('https://heavy-widget.com/widget.js').then((widget) => widget.init()) }
  • Network accessline 186
    import('https://heavy-widget.com/widget.js').then((widget) => widget.init())
  • Network accessline 276
    <!-- ❌ Unknown size until loaded --> <iframe src="https://ad-network.com/ad"></iframe>
  • Network accessline 277
    <iframe src="https://ad-network.com/ad"></iframe>
  • Network accessline 279
    <!-- ✅ Reserve space with min-height --> <div style="min-height: 250px;">   <iframe src="https://ad-network.com/ad" height="250"></iframe>
  • Network accessline 280
    <div style="min-height: 250px;">   <iframe src="https://ad-network.com/ad" height="250"></iframe> </div>
  • Network accessline 281
    <iframe src="https://ad-network.com/ad" height="250"></iframe>
  • Network accessline 284
    <!-- ✅ Or use aspect-ratio container --> <div style="aspect-ratio: 16/9;">   <iframe src="https://youtube.com/embed/..." style="width: 100%; height: 100%;"></iframe>
  • Network accessline 285
    <div style="aspect-ratio: 16/9;">   <iframe src="https://youtube.com/embed/..." style="width: 100%; height: 100%;"></iframe> </div>
  • Network accessline 286
    <iframe src="https://youtube.com/embed/..." style="width: 100%; height: 100%;"></iframe>
  • Network accessline 463
    - [web.dev LCP](https://web.dev/articles/lcp)
  • Network accessline 464
    - [web.dev INP](https://web.dev/articles/inp)
  • Network accessline 465
    - [web.dev CLS](https://web.dev/articles/cls)

packages/skills-catalog/skills/(performance)/perf-astro/SKILL.md

  • Network accessline 94
    <!-- Non-blocking Google Fonts -->     <link rel="preconnect" href="https://fonts.googleapis.com">
  • Network accessline 95
    <link rel="preconnect" href="https://fonts.googleapis.com">
  • Network accessline 96
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  • Network accessline 97
    <link       rel="stylesheet"       href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap"
  • Network accessline 98
    rel="stylesheet"       href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap"       media="print"
  • Network accessline 99
    href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap"
  • Network accessline 102
    />     <noscript>       <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap">
  • Network accessline 103
    <noscript>       <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap">     </noscript>
  • Network accessline 104
    <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap">
  • Network accessline 135
    npx lighthouse https://your-site.com --preset=perf --form-factor=mobile

packages/skills-catalog/skills/(performance)/perf-lighthouse/SKILL.md

  • Network accessline 14
    # Basic audit lighthouse https://example.com
  • Network accessline 15
    lighthouse https://example.com
  • Network accessline 17
    # Mobile performance only (faster) lighthouse https://example.com --preset=perf --form-factor=mobile
  • Network accessline 18
    lighthouse https://example.com --preset=perf --form-factor=mobile
  • Network accessline 20
    # Output JSON for parsing lighthouse https://example.com --output=json --output-path=./report.json
  • Network accessline 21
    lighthouse https://example.com --output=json --output-path=./report.json
  • Network accessline 23
    # Output HTML report lighthouse https://example.com --output=html --output-path=./report.html
  • Network accessline 24
    lighthouse https://example.com --output=html --output-path=./report.html
  • Network accessline 64
    lighthouse https://example.com --budget-path=./budget.json
  • Network accessline 119
    with:           urls: |             http://localhost:3000
  • Network accessline 120
    urls: |             http://localhost:3000             http://localhost:3000/about
  • Network accessline 121
    http://localhost:3000
  • Network accessline 122
    http://localhost:3000/about
  • Network accessline 146
    ci: {     collect: {       url: ['http://localhost:3000/', 'http://localhost:3000/about'],
  • Network accessline 147
    collect: {       url: ['http://localhost:3000/', 'http://localhost:3000/about'],       startServerCommand: 'npm run start',
  • Network accessline 148
    url: ['http://localhost:3000/', 'http://localhost:3000/about'],
  • Network accessline 205
    # Save baseline lighthouse https://prod.example.com --output=json --output-path=baseline.json
  • Network accessline 206
    lighthouse https://prod.example.com --output=json --output-path=baseline.json
  • Network accessline 208
    # Run on PR lighthouse https://preview.example.com --output=json --output-path=pr.json
  • Network accessline 209
    lighthouse https://preview.example.com --output=json --output-path=pr.json

packages/skills-catalog/skills/(performance)/perf-web-optimization/SKILL.md

  • Network accessline 36
    <!-- Preconnect to font origin --> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
  • Network accessline 37
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
  • Network accessline 40
    <link   rel="stylesheet"   href="https://fonts.googleapis.com/css2?family=Inter&display=swap"
  • Network accessline 41
    rel="stylesheet"   href="https://fonts.googleapis.com/css2?family=Inter&display=swap"   media="print"
  • Network accessline 42
    href="https://fonts.googleapis.com/css2?family=Inter&display=swap"

packages/skills-catalog/skills/(quality)/react-best-practices/AGENTS.md

  • Network accessline 218
    Reference: [https://github.com/shuding/better-all](https://github.com/shuding/better-all)
  • Network accessline 437
    Reference: [https://vercel.com/blog/how-we-optimized-package-imports-in-next-js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js)
  • Network accessline 684
    Reference: [https://nextjs.org/docs/app/guides/authentication](https://nextjs.org/docs/app/guides/authentication)
  • Network accessline 778
    **With Vercel's [Fluid Compute](https://vercel.com/docs/fluid-compute):** LRU caching is especially effective because multiple concurrent requests can share the same function instance and cache. This means the cache persists across requests
  • Network accessline 782
    Reference: [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache)
  • Network accessline 961
    Reference: [https://react.dev/reference/react/cache](https://react.dev/reference/react/cache)
  • Network accessline 1035
    Reference: [https://nextjs.org/docs/app/api-reference/functions/after](https://nextjs.org/docs/app/api-reference/functions/after)
  • Network accessline 1169
    const [users, setUsers] = useState([])   useEffect(() => {     fetch('/api/users')
  • Network accessline 1170
    useEffect(() => {     fetch('/api/users')       .then(r => r.json())
  • Network accessline 1171
    fetch('/api/users')
  • Network accessline 1209
    Reference: [https://swr.vercel.app](https://swr.vercel.app)
  • Network accessline 1320
    Reference: [https://react.dev/learn/you-might-not-need-an-effect](https://react.dev/learn/you-might-not-need-an-effect)
  • Network accessline 1459
    **Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, manual memoization with `memo()` and `useMemo()` is not necessary. The compiler automatically optimizes re-renders.
  • Network accessline 1541
    Reference: [https://react.dev/learn/removing-effect-dependencies#should-this-code-move-to-an-event-handler](https://react.dev/learn/removing-effect-dependencies#should-this-code-move-to-an-event-handler)
  • Network accessline 1644
    **Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler can automatically optimize some cases, but functional updates are still recommended for correctness and to prevent stale closure bu
  • Network accessline 1930
    **Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler automatically hoists static JSX elements and optimizes component re-renders, making manual hoisting unnecessary.
  • Network accessline 2190
    Reference: [https://react.dev/reference/react/useTransition](https://react.dev/reference/react/useTransition)
  • Network accessline 2286
    See [this gist](https://gist.github.com/paulirish/5d52fb081b3570c81e3a) and [CSS Triggers](https://csstriggers.com/) for more information on layout-forcing operations.
  • Network accessline 2420
    Reference: [https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast)
  • Network accessline 2728
    This works for small arrays, but can be slower or just throw an error for very large arrays due to spread operator limitations. Maximal array length is approximately 124000 in Chrome 143 and 638000 in Safari 18; exact numbers may vary - see
  • Network accessline 2851
    Reference: [https://react.dev/learn/you-might-not-need-an-effect#initializing-the-application](https://react.dev/learn/you-might-not-need-an-effect#initializing-the-application)
  • Network accessline 2928
    1. [https://react.dev](https://react.dev)
  • Network accessline 2929
    2. [https://nextjs.org](https://nextjs.org)
  • Network accessline 2930
    3. [https://swr.vercel.app](https://swr.vercel.app)
  • Network accessline 2931
    4. [https://github.com/shuding/better-all](https://github.com/shuding/better-all)
  • Network accessline 2932
    5. [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache)
  • Network accessline 2933
    6. [https://vercel.com/blog/how-we-optimized-package-imports-in-next-js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js)
  • Network accessline 2934
    7. [https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast)

packages/skills-catalog/skills/(quality)/react-best-practices/README.md

  • Network accessline 84
    Reference: [Link](https://example.com)
  • Network accessline 123
    Originally created by [@shuding](https://x.com/shuding) at [Vercel](https://vercel.com).

packages/skills-catalog/skills/(quality)/react-best-practices/rules/_template.md

  • Network accessline 28
    Reference: [Link to documentation or resource](https://example.com)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/advanced-init-once.md

  • Network accessline 42
    Reference: [Initializing the application](https://react.dev/learn/you-might-not-need-an-effect#initializing-the-application)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/async-dependencies.md

  • Network accessline 51
    Reference: [https://github.com/shuding/better-all](https://github.com/shuding/better-all)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/bundle-barrel-imports.md

  • Network accessline 59
    Reference: [How we optimized package imports in Next.js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/client-swr-dedup.md

  • Network accessline 16
    const [users, setUsers] = useState([])   useEffect(() => {     fetch('/api/users')
  • Network accessline 17
    useEffect(() => {     fetch('/api/users')       .then(r => r.json())
  • Network accessline 18
    fetch('/api/users')
  • Network accessline 56
    Reference: [https://swr.vercel.app](https://swr.vercel.app)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/js-batch-dom-css.md

  • Network accessline 107
    See [this gist](https://gist.github.com/paulirish/5d52fb081b3570c81e3a) and [CSS Triggers](https://csstriggers.com/) for more information on layout-forcing operations.

packages/skills-catalog/skills/(quality)/react-best-practices/rules/js-cache-function-results.md

  • Network accessline 80
    Reference: [How we made the Vercel Dashboard twice as fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/js-min-max-loop.md

  • Network accessline 82
    This works for small arrays, but can be slower or just throw an error for very large arrays due to spread operator limitations. Maximal array length is approximately 124000 in Chrome 143 and 638000 in Safari 18; exact numbers may vary - see

packages/skills-catalog/skills/(quality)/react-best-practices/rules/rendering-hoist-jsx.md

  • Network accessline 46
    **Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler automatically hoists static JSX elements and optimizes component re-renders, making manual hoisting unnecessary.

packages/skills-catalog/skills/(quality)/react-best-practices/rules/rendering-usetransition-loading.md

  • Network accessline 75
    Reference: [useTransition](https://react.dev/reference/react/useTransition)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/rerender-derived-state-no-effect.md

  • Network accessline 40
    References: [You Might Not Need an Effect](https://react.dev/learn/you-might-not-need-an-effect)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/rerender-functional-setstate.md

  • Network accessline 74
    **Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler can automatically optimize some cases, but functional updates are still recommended for correctness and to prevent stale closure bu

packages/skills-catalog/skills/(quality)/react-best-practices/rules/rerender-memo.md

  • Network accessline 44
    **Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, manual memoization with `memo()` and `useMemo()` is not necessary. The compiler automatically optimizes re-renders.

packages/skills-catalog/skills/(quality)/react-best-practices/rules/rerender-move-effect-to-event.md

  • Network accessline 45
    Reference: [Should this code move to an event handler?](https://react.dev/learn/removing-effect-dependencies#should-this-code-move-to-an-event-handler)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/server-after-nonblocking.md

  • Network accessline 73
    Reference: [https://nextjs.org/docs/app/api-reference/functions/after](https://nextjs.org/docs/app/api-reference/functions/after)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/server-auth-actions.md

  • Network accessline 96
    Reference: [https://nextjs.org/docs/app/guides/authentication](https://nextjs.org/docs/app/guides/authentication)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/server-cache-lru.md

  • Network accessline 37
    **With Vercel's [Fluid Compute](https://vercel.com/docs/fluid-compute):** LRU caching is especially effective because multiple concurrent requests can share the same function instance and cache. This means the cache persists across requests
  • Network accessline 41
    Reference: [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache)

packages/skills-catalog/skills/(quality)/react-best-practices/rules/server-cache-react.md

  • Network accessline 76
    Reference: [React.cache documentation](https://react.dev/reference/react/cache)

packages/skills-catalog/skills/(quality)/seo/SKILL.md

  • Network accessline 47
    Sitemap: https://example.com/sitemap.xml
  • Network accessline 47
    Sitemap: https://example.com/sitemap.xml
  • Network accessline 69
    <!-- Prevent duplicate content issues --> <link rel="canonical" href="https://example.com/page" />
  • Network accessline 69
    <!-- Prevent duplicate content issues --> <link rel="canonical" href="https://example.com/page" />
  • Network accessline 70
    <link rel="canonical" href="https://example.com/page" />
  • Network accessline 70
    <link rel="canonical" href="https://example.com/page" />
  • Network accessline 72
    <!-- Self-referencing canonical (recommended) --> <link rel="canonical" href="https://example.com/current-page" />
  • Network accessline 72
    <!-- Self-referencing canonical (recommended) --> <link rel="canonical" href="https://example.com/current-page" />
  • Network accessline 73
    <link rel="canonical" href="https://example.com/current-page" />
  • Network accessline 73
    <link rel="canonical" href="https://example.com/current-page" />
  • Network accessline 75
    <!-- For paginated content --> <link rel="canonical" href="https://example.com/products" />
  • Network accessline 75
    <!-- For paginated content --> <link rel="canonical" href="https://example.com/products" />
  • Network accessline 76
    <link rel="canonical" href="https://example.com/products" />
  • Network accessline 76
    <link rel="canonical" href="https://example.com/products" />
  • Network accessline 83
    <?xml version="1.0" encoding="UTF-8"?> <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  • Network accessline 83
    <?xml version="1.0" encoding="UTF-8"?> <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  • Network accessline 84
    <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  • Network accessline 84
    <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  • Network accessline 85
    <url>     <loc>https://example.com/</loc>     <lastmod>2024-01-15</lastmod>
  • Network accessline 85
    <url>     <loc>https://example.com/</loc>     <lastmod>2024-01-15</lastmod>
  • Network accessline 86
    <loc>https://example.com/</loc>
  • Network accessline 86
    <loc>https://example.com/</loc>
  • Network accessline 90
    </url>   <url>     <loc>https://example.com/products</loc>
  • Network accessline 90
    </url>   <url>     <loc>https://example.com/products</loc>
  • Network accessline 91
    <url>     <loc>https://example.com/products</loc>     <lastmod>2024-01-14</lastmod>
  • Network accessline 91
    <url>     <loc>https://example.com/products</loc>     <lastmod>2024-01-14</lastmod>
  • Network accessline 92
    <loc>https://example.com/products</loc>
  • Network accessline 92
    <loc>https://example.com/products</loc>
  • Network accessline 111
    ✅ Good URLs: https://example.com/products/blue-widget
  • Network accessline 111
    ✅ Good URLs: https://example.com/products/blue-widget
  • Network accessline 112
    https://example.com/products/blue-widget
  • Network accessline 112
    https://example.com/products/blue-widget
  • Network accessline 113
    https://example.com/blog/how-to-use-widgets
  • Network accessline 113
    https://example.com/blog/how-to-use-widgets
  • Network accessline 115
    ❌ Poor URLs: https://example.com/p?id=12345
  • Network accessline 115
    ❌ Poor URLs: https://example.com/p?id=12345
  • Network accessline 116
    https://example.com/p?id=12345
  • Network accessline 116
    https://example.com/p?id=12345
  • Network accessline 117
    https://example.com/products/item/category/subcategory/blue-widget-2024-sale-discount
  • Network accessline 117
    https://example.com/products/item/category/subcategory/blue-widget-2024-sale-discount
  • Network accessline 132
    <!-- Ensure all resources use HTTPS --> <img src="https://example.com/image.jpg" />
  • Network accessline 132
    <!-- Ensure all resources use HTTPS --> <img src="https://example.com/image.jpg" />
  • Network accessline 133
    <img src="https://example.com/image.jpg" />
  • Network accessline 133
    <img src="https://example.com/image.jpg" />
  • Network accessline 135
    <!-- Not: --> <img src="http://example.com/image.jpg" />
  • Network accessline 135
    <!-- Not: --> <img src="http://example.com/image.jpg" />
  • Network accessline 136
    <img src="http://example.com/image.jpg" />
  • Network accessline 136
    <img src="http://example.com/image.jpg" />
  • Network accessline 266
    <script type="application/ld+json">   {     "@context": "https://schema.org",
  • Network accessline 266
    <script type="application/ld+json">   {     "@context": "https://schema.org",
  • Network accessline 267
    {     "@context": "https://schema.org",     "@type": "Organization",
  • Network accessline 267
    {     "@context": "https://schema.org",     "@type": "Organization",
  • Network accessline 268
    "@context": "https://schema.org",
  • Network accessline 268
    "@context": "https://schema.org",
  • Network accessline 269
    "@type": "Organization",     "name": "Example Company",     "url": "https://example.com",
  • Network accessline 269
    "@type": "Organization",     "name": "Example Company",     "url": "https://example.com",
  • Network accessline 270
    "name": "Example Company",     "url": "https://example.com",     "logo": "https://example.com/logo.png",
  • Network accessline 270
    "name": "Example Company",     "url": "https://example.com",     "logo": "https://example.com/logo.png",
  • Network accessline 271
    "url": "https://example.com",
  • Network accessline 271
    "url": "https://example.com",
  • Network accessline 272
    "logo": "https://example.com/logo.png",
  • Network accessline 272
    "logo": "https://example.com/logo.png",
  • Network accessline 273
    "sameAs": ["https://twitter.com/example", "https://linkedin.com/company/example"],
  • Network accessline 273
    "sameAs": ["https://twitter.com/example", "https://linkedin.com/company/example"],
  • Network accessline 286
    <script type="application/ld+json">   {     "@context": "https://schema.org",
  • Network accessline 286
    <script type="application/ld+json">   {     "@context": "https://schema.org",
  • Network accessline 287
    {     "@context": "https://schema.org",     "@type": "Article",
  • Network accessline 287
    {     "@context": "https://schema.org",     "@type": "Article",
  • Network accessline 288
    "@context": "https://schema.org",
  • Network accessline 288
    "@context": "https://schema.org",
  • Network accessline 290
    "headline": "How to Choose the Right Widget",     "description": "Complete guide to selecting widgets for your needs.",     "image": "https://example.com/article-image.jpg",
  • Network accessline 290
    "headline": "How to Choose the Right Widget",     "description": "Complete guide to selecting widgets for your needs.",     "image": "https://example.com/article-image.jpg",
  • Network accessline 291
    "description": "Complete guide to selecting widgets for your needs.",     "image": "https://example.com/article-image.jpg",     "author": {
  • Network accessline 291
    "description": "Complete guide to selecting widgets for your needs.",     "image": "https://example.com/article-image.jpg",     "author": {
  • Network accessline 292
    "image": "https://example.com/article-image.jpg",
  • Network accessline 292
    "image": "https://example.com/article-image.jpg",
  • Network accessline 294
    "@type": "Person",       "name": "Jane Smith",       "url": "https://example.com/authors/jane-smith"
  • Network accessline 294
    "@type": "Person",       "name": "Jane Smith",       "url": "https://example.com/authors/jane-smith"
  • Network accessline 295
    "name": "Jane Smith",       "url": "https://example.com/authors/jane-smith"     },
  • Network accessline 295
    "name": "Jane Smith",       "url": "https://example.com/authors/jane-smith"     },
  • Network accessline 296
    "url": "https://example.com/authors/jane-smith"
  • Network accessline 296
    "url": "https://example.com/authors/jane-smith"
  • Network accessline 301
    "logo": {         "@type": "ImageObject",         "url": "https://example.com/logo.png"
  • Network accessline 301
    "logo": {         "@type": "ImageObject",         "url": "https://example.com/logo.png"
  • Network accessline 302
    "@type": "ImageObject",         "url": "https://example.com/logo.png"       }
  • Network accessline 302
    "@type": "ImageObject",         "url": "https://example.com/logo.png"       }
  • Network accessline 303
    "url": "https://example.com/logo.png"
  • Network accessline 303
    "url": "https://example.com/logo.png"
  • Network accessline 315
    <script type="application/ld+json">   {     "@context": "https://schema.org",
  • Network accessline 315
    <script type="application/ld+json">   {     "@context": "https://schema.org",
  • Network accessline 316
    {     "@context": "https://schema.org",     "@type": "Product",
  • Network accessline 316
    {     "@context": "https://schema.org",     "@type": "Product",
  • Network accessline 317
    "@context": "https://schema.org",
  • Network accessline 317
    "@context": "https://schema.org",
  • Network accessline 318
    "@type": "Product",     "name": "Blue Widget Pro",     "image": "https://example.com/blue-widget.jpg",
  • Network accessline 318
    "@type": "Product",     "name": "Blue Widget Pro",     "image": "https://example.com/blue-widget.jpg",
  • Network accessline 319
    "name": "Blue Widget Pro",     "image": "https://example.com/blue-widget.jpg",     "description": "Premium blue widget with advanced features.",
  • Network accessline 319
    "name": "Blue Widget Pro",     "image": "https://example.com/blue-widget.jpg",     "description": "Premium blue widget with advanced features.",
  • Network accessline 320
    "image": "https://example.com/blue-widget.jpg",
  • Network accessline 320
    "image": "https://example.com/blue-widget.jpg",
  • Network accessline 328
    "price": "49.99",       "priceCurrency": "USD",       "availability": "https://schema.org/InStock",
  • Network accessline 328
    "price": "49.99",       "priceCurrency": "USD",       "availability": "https://schema.org/InStock",
  • Network accessline 329
    "priceCurrency": "USD",       "availability": "https://schema.org/InStock",       "url": "https://example.com/products/blue-widget"
  • Network accessline 329
    "priceCurrency": "USD",       "availability": "https://schema.org/InStock",       "url": "https://example.com/products/blue-widget"
  • Network accessline 330
    "availability": "https://schema.org/InStock",
  • Network accessline 330
    "availability": "https://schema.org/InStock",
  • Network accessline 331
    "url": "https://example.com/products/blue-widget"
  • Network accessline 331
    "url": "https://example.com/products/blue-widget"
  • Network accessline 345
    <script type="application/ld+json">   {     "@context": "https://schema.org",
  • Network accessline 345
    <script type="application/ld+json">   {     "@context": "https://schema.org",
  • Network accessline 346
    {     "@context": "https://schema.org",     "@type": "FAQPage",
  • Network accessline 346
    {     "@context": "https://schema.org",     "@type": "FAQPage",
  • Network accessline 347
    "@context": "https://schema.org",
  • Network accessline 347
    "@context": "https://schema.org",
  • Network accessline 374
    <script type="application/ld+json">   {     "@context": "https://schema.org",
  • Network accessline 374
    <script type="application/ld+json">   {     "@context": "https://schema.org",
  • Network accessline 375
    {     "@context": "https://schema.org",     "@type": "BreadcrumbList",
  • Network accessline 375
    {     "@context": "https://schema.org",     "@type": "BreadcrumbList",
  • Network accessline 376
    "@context": "https://schema.org",
  • Network accessline 376
    "@context": "https://schema.org",
  • Network accessline 381
    "position": 1,         "name": "Home",         "item": "https://example.com"
  • Network accessline 381
    "position": 1,         "name": "Home",         "item": "https://example.com"
  • Network accessline 382
    "name": "Home",         "item": "https://example.com"       },
  • Network accessline 382
    "name": "Home",         "item": "https://example.com"       },
  • Network accessline 383
    "item": "https://example.com"
  • Network accessline 383
    "item": "https://example.com"
  • Network accessline 387
    "position": 2,         "name": "Products",         "item": "https://example.com/products"
  • Network accessline 387
    "position": 2,         "name": "Products",         "item": "https://example.com/products"
  • Network accessline 388
    "name": "Products",         "item": "https://example.com/products"       },
  • Network accessline 388
    "name": "Products",         "item": "https://example.com/products"       },
  • Network accessline 389
    "item": "https://example.com/products"
  • Network accessline 389
    "item": "https://example.com/products"
  • Network accessline 393
    "position": 3,         "name": "Blue Widgets",         "item": "https://example.com/products/blue-widgets"
  • Network accessline 393
    "position": 3,         "name": "Blue Widgets",         "item": "https://example.com/products/blue-widgets"
  • Network accessline 394
    "name": "Blue Widgets",         "item": "https://example.com/products/blue-widgets"       }
  • Network accessline 394
    "name": "Blue Widgets",         "item": "https://example.com/products/blue-widgets"       }
  • Network accessline 395
    "item": "https://example.com/products/blue-widgets"
  • Network accessline 395
    "item": "https://example.com/products/blue-widgets"
  • Network accessline 406
    - [Google Rich Results Test](https://search.google.com/test/rich-results)
  • Network accessline 406
    - [Google Rich Results Test](https://search.google.com/test/rich-results)
  • Network accessline 407
    - [Schema.org Validator](https://validator.schema.org/)
  • Network accessline 407
    - [Schema.org Validator](https://validator.schema.org/)
  • Network accessline 463
    <!-- For multi-language sites --> <link rel="alternate" hreflang="en" href="https://example.com/page" />
  • Network accessline 463
    <!-- For multi-language sites --> <link rel="alternate" hreflang="en" href="https://example.com/page" />
  • Network accessline 464
    <link rel="alternate" hreflang="en" href="https://example.com/page" />
  • Network accessline 464
    <link rel="alternate" hreflang="en" href="https://example.com/page" />
  • Network accessline 465
    <link rel="alternate" hreflang="es" href="https://example.com/es/page" />
  • Network accessline 465
    <link rel="alternate" hreflang="es" href="https://example.com/es/page" />
  • Network accessline 466
    <link rel="alternate" hreflang="fr" href="https://example.com/fr/page" />
  • Network accessline 466
    <link rel="alternate" hreflang="fr" href="https://example.com/fr/page" />
  • Network accessline 467
    <link rel="alternate" hreflang="x-default" href="https://example.com/page" />
  • Network accessline 467
    <link rel="alternate" hreflang="x-default" href="https://example.com/page" />
  • Network accessline 529
    - [Google Search Central](https://developers.google.com/search)
  • Network accessline 529
    - [Google Search Central](https://developers.google.com/search)
  • Network accessline 530
    - [Schema.org](https://schema.org/)
  • Network accessline 530
    - [Schema.org](https://schema.org/)

packages/skills-catalog/skills/(quality)/the-judge/SKILL.md

  • Network accessline 121
    "evidence": [         {"type": "internal", "ref": "src/billing/invoice.ts:142"},         {"type": "external", "ref": "https://official-docs.example/api#behavior"}
  • Network accessline 122
    {"type": "internal", "ref": "src/billing/invoice.ts:142"},         {"type": "external", "ref": "https://official-docs.example/api#behavior"}       ]
  • Network accessline 123
    {"type": "external", "ref": "https://official-docs.example/api#behavior"}

packages/skills-catalog/skills/(quality)/the-judge/scripts/post_review.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(quality)/the-judge/scripts/review_gate.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(quality)/the-judge/scripts/scan_bypasses.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/SKILL.md

  • Network accessline 123
    | Schema validation error: "required property missing" | `datePublished`, `author`, or `headline` absent                          | Add all required fields; check Schema.org/TechArticle for the full list                | | `OAI-SearchBot` n
  • Network accessline 124
    | `OAI-SearchBot` not crawling                         | `User-agent: *` `Disallow: /` in `robots.txt` blocks all bots            | Add explicit `Allow: /` for `OAI-SearchBot` above the wildcard rule                    | | `llms.txt` not pi
  • Network accessline 125
    | `llms.txt` not picked up by agents                   | File not at `https://example.com/llms.txt` (must be root)                | Move file to domain root; verify it returns `Content-Type: text/plain`                 |

packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/references/measurement-and-tools.md

  • Network accessline 19
    **Access:** [search.google.com/search-console](https://search.google.com/search-console)
  • Network accessline 33
    **Access:** [bing.com/webmasters](https://www.bing.com/webmasters)
  • Network accessline 46
    **Access:** [search.google.com/test/rich-results](https://search.google.com/test/rich-results)
  • Network accessline 56
    **Access:** [validator.schema.org](https://validator.schema.org)
  • Network accessline 69
    **Access:** [ijonis.com](https://ijonis.com) or via the `geo-lint` CLI if available.
  • Network accessline 83
    **Access:** [pagespeed.web.dev](https://pagespeed.web.dev)

packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/faqpage.jsonld

  • Network accessline 1
    {   "@context": "https://schema.org",
  • Network accessline 2
    "@context": "https://schema.org",

packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/llms.txt

  • Network accessline 7
    - [Page Title](https://example.com/page-path/): One sentence describing what this page covers and what an AI agent would use it for.
  • Network accessline 8
    - [Page Title](https://example.com/another-page/): One sentence description.
  • Network accessline 9
    - [Page Title](https://example.com/guide/): One sentence description.
  • Network accessline 13
    - [OpenAPI spec](https://example.com/openapi.json): Machine-readable API definition.
  • Network accessline 14
    - [Sitemap](https://example.com/sitemap.xml): Full list of indexed pages.

packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/page-metadata.html

  • Network accessline 9
    <!-- Canonical URL (required — prevents duplicate content signals) --> <link rel="canonical" href="https://example.com/page-path/" />
  • Network accessline 10
    <link rel="canonical" href="https://example.com/page-path/" />
  • Network accessline 12
    <!-- Language (required for Understandable pillar) --> <!-- Remove hreflang block if page has no translations --> <link rel="alternate" hreflang="en" href="https://example.com/page-path/" />
  • Network accessline 13
    <!-- Remove hreflang block if page has no translations --> <link rel="alternate" hreflang="en" href="https://example.com/page-path/" /> <link rel="alternate" hreflang="pt-BR" href="https://example.com/pt/page-path/" />
  • Network accessline 14
    <link rel="alternate" hreflang="en" href="https://example.com/page-path/" />
  • Network accessline 15
    <link rel="alternate" hreflang="pt-BR" href="https://example.com/pt/page-path/" />
  • Network accessline 16
    <link rel="alternate" hreflang="x-default" href="https://example.com/page-path/" />
  • Network accessline 20
    <meta property="og:title" content="PAGE_TITLE" /> <meta property="og:description" content="BRIEF_DESCRIPTION_150_CHARS_MAX" /> <meta property="og:url" content="https://example.com/page-path/" />
  • Network accessline 21
    <meta property="og:description" content="BRIEF_DESCRIPTION_150_CHARS_MAX" /> <meta property="og:url" content="https://example.com/page-path/" /> <meta property="og:image" content="https://example.com/images/page-og.png" />
  • Network accessline 22
    <meta property="og:url" content="https://example.com/page-path/" />
  • Network accessline 23
    <meta property="og:image" content="https://example.com/images/page-og.png" />

packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/quotable-article-outline.md

  • Network accessline 46
    - [Source Name](https://primary-source-url.com) — one-sentence description of what this source covers.
  • Network accessline 47
    - [Source Name](https://primary-source-url.com) — one-sentence description.

packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/robots-ai-crawlers.txt

  • Network accessline 1
    # robots.txt — AI crawler controls template # Place at: https://example.com/robots.txt
  • Network accessline 2
    # Place at: https://example.com/robots.txt
  • Network accessline 11
    User-agent: * Allow: / Sitemap: https://example.com/sitemap.xml
  • Network accessline 13
    Sitemap: https://example.com/sitemap.xml
  • Network accessline 36
    # Sitemap: https://example.com/sitemap.xml

packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/techarticle.jsonld

  • Network accessline 1
    {   "@context": "https://schema.org",
  • Network accessline 2
    "@context": "https://schema.org",
  • Network accessline 9
    "@type": "Person",     "name": "AUTHOR_FULL_NAME",     "url": "https://example.com/about/author-name/"
  • Network accessline 10
    "name": "AUTHOR_FULL_NAME",     "url": "https://example.com/about/author-name/"   },
  • Network accessline 11
    "url": "https://example.com/about/author-name/"
  • Network accessline 14
    "@type": "Organization",     "name": "SITE_OR_COMPANY_NAME",     "url": "https://example.com",
  • Network accessline 15
    "name": "SITE_OR_COMPANY_NAME",     "url": "https://example.com",     "logo": {
  • Network accessline 16
    "url": "https://example.com",
  • Network accessline 17
    "logo": {       "@type": "ImageObject",       "url": "https://example.com/images/logo.png"
  • Network accessline 18
    "@type": "ImageObject",       "url": "https://example.com/images/logo.png"     }
  • Network accessline 19
    "url": "https://example.com/images/logo.png"
  • Network accessline 22
    "mainEntityOfPage": {     "@type": "WebPage",     "@id": "https://example.com/page-path/"
  • Network accessline 23
    "@type": "WebPage",     "@id": "https://example.com/page-path/"   },
  • Network accessline 24
    "@id": "https://example.com/page-path/"
  • Network accessline 25
    },   "image": "https://example.com/images/page-og.png",   "articleSection": "TOPIC_CATEGORY",
  • Network accessline 26
    "image": "https://example.com/images/page-og.png",

packages/skills-catalog/skills/(quality)/web-accessibility/SKILL.md

  • Network accessline 470
    # Lighthouse accessibility audit npx lighthouse https://example.com --only-categories=accessibility
  • Network accessline 471
    npx lighthouse https://example.com --only-categories=accessibility
  • Network accessline 473
    # axe-core npm install @axe-core/cli -g axe https://example.com
  • Network accessline 475
    axe https://example.com
  • Network accessline 528
    - [WCAG 2.1 Quick Reference](https://www.w3.org/WAI/WCAG21/quickref/)
  • Network accessline 529
    - [WAI-ARIA Authoring Practices](https://www.w3.org/WAI/ARIA/apg/)
  • Network accessline 530
    - [Deque axe Rules](https://dequeuniversity.com/rules/axe/)

packages/skills-catalog/skills/(quality)/web-accessibility/references/WCAG.md

  • Network accessline 103
    <a href="/page">Descriptive link text</a> <!-- External links --> <a href="https://external.com" target="_blank" rel="noopener">
  • Network accessline 104
    <!-- External links --> <a href="https://external.com" target="_blank" rel="noopener">   External site
  • Network accessline 105
    <a href="https://external.com" target="_blank" rel="noopener">
  • Network accessline 162
    | Tool                     | Type                    | URL                                                      | | ------------------------ | ----------------------- | -------------------------------------------------------- | | axe DevToo
  • Network accessline 163
    | ------------------------ | ----------------------- | -------------------------------------------------------- | | axe DevTools             | Browser extension       | [deque.com/axe](https://www.deque.com/axe/)              | | WAVE      
  • Network accessline 164
    | axe DevTools             | Browser extension       | [deque.com/axe](https://www.deque.com/axe/)              |
  • Network accessline 165
    | WAVE                     | Browser extension       | [wave.webaim.org](https://wave.webaim.org/)              |
  • Network accessline 166
    | Lighthouse               | Built into Chrome       | DevTools → Lighthouse                                    | | NVDA                     | Screen reader (Windows) | [nvaccess.org](https://www.nvaccess.org/)                | | VoiceOver 
  • Network accessline 167
    | NVDA                     | Screen reader (Windows) | [nvaccess.org](https://www.nvaccess.org/)                |
  • Network accessline 169
    | Colour Contrast Analyser | Desktop app             | [tpgi.com](https://www.tpgi.com/color-contrast-checker/) |

packages/skills-catalog/skills/(quality)/web-best-practices/SKILL.md

  • Network accessline 21
    <!-- ❌ Mixed content --> <img src="http://example.com/image.jpg" />
  • Network accessline 22
    <img src="http://example.com/image.jpg" />
  • Network accessline 23
    <script src="http://cdn.example.com/script.js"></script>
  • Network accessline 25
    <!-- ✅ HTTPS only --> <img src="https://example.com/image.jpg" />
  • Network accessline 26
    <img src="https://example.com/image.jpg" />
  • Network accessline 27
    <script src="https://cdn.example.com/script.js"></script>
  • Network accessline 44
    http-equiv="Content-Security-Policy"   content="default-src 'self';                 script-src 'self' https://trusted-cdn.com;
  • Network accessline 45
    content="default-src 'self';                 script-src 'self' https://trusted-cdn.com;                 style-src 'self' 'unsafe-inline';
  • Network accessline 46
    script-src 'self' https://trusted-cdn.com;
  • Network accessline 47
    style-src 'self' 'unsafe-inline';                img-src 'self' data: https:;                connect-src 'self' https://api.example.com;"
  • Network accessline 48
    img-src 'self' data: https:;                connect-src 'self' https://api.example.com;" />
  • Network accessline 49
    connect-src 'self' https://api.example.com;"
  • Network accessline 58
    Content-Security-Policy:   default-src 'self';   script-src 'self' 'nonce-abc123' https://trusted.com;
  • Network accessline 59
    default-src 'self';   script-src 'self' 'nonce-abc123' https://trusted.com;   style-src 'self' 'nonce-abc123';
  • Network accessline 60
    script-src 'self' 'nonce-abc123' https://trusted.com;
  • Network accessline 61
    style-src 'self' 'nonce-abc123';   img-src 'self' data: https:;   connect-src 'self' https://api.example.com;
  • Network accessline 62
    img-src 'self' data: https:;   connect-src 'self' https://api.example.com;   frame-ancestors 'self';
  • Network accessline 63
    connect-src 'self' https://api.example.com;
  • Network accessline 262
    <!-- Or use polyfill.io --> <script src="https://polyfill.io/v3/polyfill.min.js?features=fetch,IntersectionObserver"></script>
  • Network accessline 263
    <script src="https://polyfill.io/v3/polyfill.min.js?features=fetch,IntersectionObserver"></script>
  • Network accessline 285
    // ✅ Async fetch const response = await fetch(url);
  • Network accessline 286
    const response = await fetch(url);
  • Network accessline 563
    <!-- Or allow for specific origins --> <meta http-equiv="Permissions-Policy" content="geolocation=(self 'https://maps.example.com')" />
  • Network accessline 564
    <meta http-equiv="Permissions-Policy" content="geolocation=(self 'https://maps.example.com')" />
  • Network accessline 605
    | -------------------------------------------------- | -------------------------- | | `npm audit`                                        | Dependency vulnerabilities | | [SecurityHeaders.com](https://securityheaders.com) | Header analysis  
  • Network accessline 606
    | `npm audit`                                        | Dependency vulnerabilities | | [SecurityHeaders.com](https://securityheaders.com) | Header analysis            | | [W3C Validator](https://validator.w3.org)          | HTML validation  
  • Network accessline 607
    | [SecurityHeaders.com](https://securityheaders.com) | Header analysis            |
  • Network accessline 608
    | [W3C Validator](https://validator.w3.org)          | HTML validation            |
  • Network accessline 610
    | [Observatory](https://observatory.mozilla.org)     | Security scan              |
  • Network accessline 614
    - [MDN Web Security](https://developer.mozilla.org/en-US/docs/Web/Security)
  • Network accessline 615
    - [OWASP Top 10](https://owasp.org/www-project-top-ten/)

packages/skills-catalog/skills/(quality)/web-quality-audit/scripts/analyze.sh

  • Executable scriptline 1
    #!/bin/bash

packages/skills-catalog/skills/(security)/security-best-practices/LICENSE.txt

  • Network accessline 1
    Apache License Version 2.0, January 2004 http://www.apache.org/licenses/
  • Network accessline 3
    http://www.apache.org/licenses/
  • Network accessline 195
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(security)/security-best-practices/references/golang-general-backend-security.md

  • Access to secretsline 216
    [Credential-related source omitted]
  • Access to secretsline 220
    [Credential-related source omitted]
  • Access to secretsline 458
    [Credential-related source omitted]
  • Network accessline 708
    - MUST set an overall timeout on `http.Client` usage (or equivalent per-request deadlines via context + transport timeouts). - MUST ensure `resp.Body.Close()` is called for all successful requests (typically `defer resp.Body.Close()` immedi
  • Network accessline 721
    - Search for `http.Get(`, `http.Post(`, `client := &http.Client{}` without `Timeout`, `client.Do(` and missing closes.
  • Network accessline 732
    - The net/http package exposes `DefaultClient` as a zero-valued `http.Client`, which can easily lead to “no timeout” behavior unless configured.
  • Network accessline 964
    - Go Security Policy — https://go.dev/doc/security/policy
  • Network accessline 965
    - Go Release History (security fixes in patch releases) — https://go.dev/doc/devel/release
  • Network accessline 966
    - Go 1.25 Release Notes — https://go.dev/doc/go1.25
  • Network accessline 967
    - net/http (server timeouts, MaxHeaderBytes, DefaultClient) — https://pkg.go.dev/net/http
  • Network accessline 968
    - html/template (auto-escaping and trusted-template assumptions) — https://pkg.go.dev/html/template
  • Network accessline 969
    - crypto/tls (MinVersion defaults, InsecureSkipVerify warnings) — https://pkg.go.dev/crypto/tls
  • Network accessline 970
    - crypto/rand (secure randomness, token helpers) — https://pkg.go.dev/crypto/rand
  • Network accessline 971
    - crypto/subtle (constant-time comparisons) — https://pkg.go.dev/crypto/subtle
  • Dangerous shell operationline 972
    - os/exec (no shell by default; command execution guidance) — https://pkg.go.dev/os/exec
  • Network accessline 972
    - os/exec (no shell by default; command execution guidance) — https://pkg.go.dev/os/exec
  • Network accessline 973
    - unsafe (bypasses type safety) — https://go.dev/src/unsafe/unsafe.go
  • Network accessline 974
    - net/http/pprof (debug endpoints) — https://pkg.go.dev/net/http/pprof
  • Network accessline 975
    - cmd/go (module authentication via go.sum/checksum DB; env vars like GOINSECURE) — https://pkg.go.dev/cmd/go
  • Network accessline 976
    - Module Mirror and Checksum Database Launched (Go blog) — https://go.dev/blog/module-mirror-launch
  • Network accessline 977
    - govulncheck documentation — https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck
  • Network accessline 978
    - Go Race Detector documentation — https://go.dev/doc/articles/race_detector
  • Network accessline 979
    - bcrypt (password hashing) — https://pkg.go.dev/golang.org/x/crypto/bcrypt
  • Network accessline 980
    - Go vulnerability entry example (multipart resource consumption) — https://pkg.go.dev/vuln/GO-2023-1569
  • Network accessline 984
    - Session Management — https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html
  • Network accessline 985
    - CSRF Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
  • Network accessline 986
    - SSRF Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html
  • Network accessline 987
    - XSS Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html
  • Network accessline 988
    - HTTP Security Response Headers — https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html

packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-express-web-server-security.md

  • Access to secretsline 377
    [Credential-related source omitted]
  • Dangerous shell operationline 782
    - `exec(req.query.cmd)`
  • Dangerous shell operationline 783
    - `exec(`convert ${userPath} ...`)`
  • Dangerous shell operationline 789
    - Search for `child_process`, `exec(`, `execSync(`, `spawn(`, `fork(`.
  • Network accessline 822
    - `fetch(req.query.url)`
  • Network accessline 827
    - Search for `fetch(`, `axios(`, `got(`, `request(`, `node-fetch` usage where URL originates from users/DB.
  • Network accessline 1102
    - Express: Production Best Practices — Security: `https://expressjs.com/en/advanced/best-practice-security.html` ([Express][1])
  • Network accessline 1103
    - Express: Behind Proxies (`trust proxy`): `https://expressjs.com/en/guide/behind-proxies.html` ([Express][2])
  • Network accessline 1104
    - Express 5.x API Reference (parsers, static, sendFile, redirect, cookies): `https://expressjs.com/en/5x/api.html` ([Express][5])
  • Network accessline 1105
    - Express: Error Handling: `https://expressjs.com/en/guide/error-handling.html` ([Express][11])
  • Network accessline 1109
    - express-session docs (cookie flags, secret rotation, fixation mitigation, MemoryStore warning): `https://expressjs.com/en/resources/middleware/session.html` ([Express][1])
  • Network accessline 1113
    - Node.js — Security Best Practices (DoS, proxy guidance, inspector risks, request smuggling notes): `https://nodejs.org/en/learn/getting-started/security-best-practices` ([Node.js][15])
  • Network accessline 1114
    - npm Docs — `npm audit`: `https://docs.npmjs.com/cli/v9/commands/npm-audit/` ([npm Docs][16])
  • Network accessline 1118
    - Session Management: `https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][12])
  • Network accessline 1119
    - CSRF Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][3])
  • Network accessline 1120
    - XSS Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][4])
  • Network accessline 1121
    - Input Validation: `https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][17])
  • Network accessline 1122
    - SQL Injection Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][6])
  • Network accessline 1123
    - OS Command Injection Defense: `https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][14])
  • Network accessline 1124
    - SSRF Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][7])
  • Network accessline 1125
    - File Upload: `https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][13])
  • Network accessline 1126
    - Unvalidated Redirects: `https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][18])
  • Network accessline 1127
    - HTTP Headers: `https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][10])
  • Network accessline 1131
    - Express package version (npm): `https://www.npmjs.com/package/express`
  • Network accessline 1132
    - Express open redirect advisory (CVE): `https://nvd.nist.gov/vuln/detail/CVE-2024-29041` ([NVD][9])
  • Network accessline 1134
    [1]: https://expressjs.com/en/advanced/best-practice-security.html 'Security Best Practices for Express in Production'
  • Network accessline 1135
    [2]: https://expressjs.com/en/guide/behind-proxies.html 'Express behind proxies'
  • Network accessline 1136
    [3]: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html 'Cross-Site Request Forgery Prevention - OWASP Cheat Sheet Series'
  • Network accessline 1137
    [4]: https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html 'Cross Site Scripting Prevention - OWASP Cheat Sheet Series'
  • Network accessline 1138
    [5]: https://expressjs.com/en/5x/api.html 'Express 5.x - API Reference'
  • Network accessline 1139
    [6]: https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html 'SQL Injection Prevention - OWASP Cheat Sheet Series'
  • Network accessline 1140
    [7]: https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html 'Server Side Request Forgery Prevention - OWASP Cheat Sheet Series'
  • Network accessline 1141
    [8]: https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html 'Nodejs Security - OWASP Cheat Sheet Series'
  • Network accessline 1142
    [9]: https://nvd.nist.gov/vuln/detail/cve-2024-29041 'CVE-2024-29041 Detail - NVD'
  • Network accessline 1143
    [10]: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html 'HTTP Headers - OWASP Cheat Sheet Series'
  • Network accessline 1144
    [11]: https://expressjs.com/en/guide/error-handling.html 'Express error handling'
  • Network accessline 1145
    [12]: https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html 'Session Management - OWASP Cheat Sheet Series'
  • Network accessline 1146
    [13]: https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html 'File Upload - OWASP Cheat Sheet Series'
  • Network accessline 1147
    [14]: https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html 'OS Command Injection Defense - OWASP Cheat Sheet Series'
  • Network accessline 1148
    [15]: https://nodejs.org/en/learn/getting-started/security-best-practices 'Node.js — Security Best Practices'
  • Network accessline 1149
    [16]: https://docs.npmjs.com/cli/v9/commands/npm-audit/ 'npm-audit | npm Docs'
  • Network accessline 1150
    [17]: https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html 'Input Validation - OWASP Cheat Sheet Series'
  • Network accessline 1151
    [18]: https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html 'Unvalidated Redirects and Forwards - OWASP Cheat Sheet Series'

packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-general-web-frontend-security.md

  • Dangerous shell operationline 213
    - `eval()`
  • Dangerous shell operationline 222
    - `eval(userInput)`
  • Dangerous shell operationline 228
    - Search for `eval(`, `new Function`, `setTimeout("`, `setInterval("`.
  • Dangerous shell operationline 239
    - CSP that blocks `eval()`-like APIs by default, and avoid `unsafe-eval`. ([MDN Web Docs][10])
  • Network accessline 480
    - Define an allowlist:   - `const ALLOWED = new Set(["https://app.example.com", "https://accounts.example.com"]);`
  • Network accessline 481
    - `const ALLOWED = new Set(["https://app.example.com", "https://accounts.example.com"]);`
  • Access to secretsline 510
    [Credential-related source omitted]
  • Network accessline 547
    - Search HTML for `<script src="https://...">` and `tag manager` snippets.
  • Network accessline 571
    - `<script src="https://cdn.example.com/lib.js"></script>` with no `integrity`.
  • Network accessline 576
    - Search for `<script src="https://` and `<link rel="stylesheet" href="https://` without `integrity=`.
  • Dangerous shell operationline 630
    - `eval(`, `new Function`, `setTimeout("`, `setInterval("` ([MDN Web Docs][10])
  • Network accessline 649
    - Third-party scripts:   - `<script src="https://...">` without `integrity=`
  • Network accessline 650
    - `<script src="https://...">` without `integrity=`
  • Network accessline 669
    - W3C Content Security Policy Level 2 (HTML `<meta>` delivery restrictions; unsupported directives in meta CSP): `https://www.w3.org/TR/CSP2/` ([W3C][3])
  • Network accessline 670
    - MDN: CSP Guide (strict CSP, nonces/hashes, `unsafe-inline`/`unsafe-eval`, eval blocking): `https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP` ([MDN Web Docs][10])
  • Network accessline 671
    - MDN: `<meta http-equiv>` (CSP via meta and warning about meta-based security headers): `https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/meta/http-equiv` ([MDN Web Docs][1])
  • Network accessline 672
    - MDN: `frame-ancestors` (and note it’s not supported in `<meta>`): `https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/frame-ancestors` ([MDN Web Docs][18])
  • Network accessline 676
    - OWASP: DOM Based XSS Prevention Cheat Sheet (dangerous sinks + safe patterns like `textContent`): `https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][2])
  • Network accessline 677
    - MDN: `innerHTML` (security considerations): `https://developer.mozilla.org/en-US/docs/Web/API/Element/innerHTML` ([MDN Web Docs][19])
  • Network accessline 678
    - MDN: `insertAdjacentHTML` (security considerations): `https://developer.mozilla.org/en-US/docs/Web/API/Element/insertAdjacentHTML` ([MDN Web Docs][20])
  • Network accessline 679
    - MDN: `document.write()` / `document.writeln()` (security considerations): `https://developer.mozilla.org/en-US/docs/Web/API/Document/write` and `https://developer.mozilla.org/en-US/docs/Web/API/Document/writeln` ([MDN Web Docs][13])
  • Network accessline 683
    - MDN: `javascript:` URLs (execution on navigation; discouraged; references `window.location`): `https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes/javascript` ([MDN Web Docs][4])
  • Network accessline 687
    - W3C: Trusted Types spec (DOM XSS sinks include `Element.innerHTML` and `Location.href` setters; goals and limitations): `https://www.w3.org/TR/trusted-types/` ([W3C][15])
  • Network accessline 688
    - MDN: `require-trusted-types-for` directive: `https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/require-trusted-types-for` ([MDN Web Docs][11])
  • Network accessline 689
    - MDN: `trusted-types` directive: `https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/trusted-types` ([MDN Web Docs][16])
  • Network accessline 693
    - MDN: `window.postMessage` (security guidance: specify targetOrigin; validate origin): `https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage` ([MDN Web Docs][5])
  • Network accessline 694
    - OWASP: HTML5 Security Cheat Sheet (Web Messaging guidance: explicit origin, strict checks, no `innerHTML`): `https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][6])
  • Network accessline 698
    - OWASP: Third Party JavaScript Management Cheat Sheet (risks and mitigations including SRI/mirroring): `https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][7])
  • Network accessline 699
    - MDN: Subresource Integrity overview: `https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity` ([MDN Web Docs][12])
  • Network accessline 700
    - W3C: Subresource Integrity spec: `https://www.w3.org/TR/sri-2/` ([W3C][21])
  • Network accessline 704
    - OWASP: DOM Clobbering Prevention Cheat Sheet (named property access risk; example attacks involving `location.assign` and `javascript:`): `https://cheatsheetseries.owasp.org/cheatsheets/DOM_Clobbering_Prevention_Cheat_Sheet.html` ([OWASP 
  • Network accessline 706
    [1]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/meta/http-equiv 'https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/meta/http-equiv'
  • Network accessline 707
    [2]: https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html'
  • Network accessline 708
    [3]: https://www.w3.org/TR/CSP2/ 'Content Security Policy Level 2'
  • Network accessline 709
    [4]: https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes/javascript 'javascript: URLs - URIs | MDN'
  • Network accessline 710
    [5]: https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage 'https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage'
  • Network accessline 711
    [6]: https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html'
  • Network accessline 712
    [7]: https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html'
  • Network accessline 713
    [8]: https://cheatsheetseries.owasp.org/cheatsheets/DOM_Clobbering_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/DOM_Clobbering_Prevention_Cheat_Sheet.html'
  • Network accessline 714
    [9]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel/noopener 'https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel/noopener'
  • Network accessline 715
    [10]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP'
  • Network accessline 716
    [11]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/require-trusted-types-for 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/require-trusted-types-f
  • Network accessline 717
    [12]: https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity 'https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity'
  • Network accessline 718
    [13]: https://developer.mozilla.org/en-US/docs/Web/API/Document/write 'https://developer.mozilla.org/en-US/docs/Web/API/Document/write'
  • Network accessline 719
    [14]: https://developer.mozilla.org/en-US/docs/Web/API/Document/writeln 'https://developer.mozilla.org/en-US/docs/Web/API/Document/writeln'
  • Network accessline 720
    [15]: https://www.w3.org/TR/trusted-types/ 'https://www.w3.org/TR/trusted-types/'
  • Network accessline 721
    [16]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/trusted-types 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/trusted-types'
  • Network accessline 722
    [18]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/frame-ancestors 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/frame-ancestors'
  • Network accessline 723
    [19]: https://developer.mozilla.org/en-US/docs/Web/API/Element/innerHTML 'https://developer.mozilla.org/en-US/docs/Web/API/Element/innerHTML'
  • Network accessline 724
    [20]: https://developer.mozilla.org/en-US/docs/Web/API/Element/insertAdjacentHTML 'https://developer.mozilla.org/en-US/docs/Web/API/Element/insertAdjacentHTML'
  • Network accessline 725
    [21]: https://www.w3.org/TR/sri-2/ 'https://www.w3.org/TR/sri-2/'

packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-jquery-web-frontend-security.md

  • Network accessline 199
    - `<script src="https://…/jquery.min.js"></script>` with no `integrity`.
  • Network accessline 325
    - SHOULD prefer `fetch()`/XHR to retrieve data, then render with safe DOM creation or sanitize explicitly.
  • Network accessline 340
    - Replace `.load()` with:   - `fetch()` to retrieve JSON, then render via `.text()` / node construction, or
  • Network accessline 341
    - `fetch()` to retrieve JSON, then render via `.text()` / node construction, or
  • Network accessline 342
    - `fetch()` to retrieve HTML, sanitize it, then inject.
  • Network accessline 607
    - jQuery 4.0.0 release notes (Trusted Types/CSP changes; version info): `https://blog.jquery.com/2026/01/17/jquery-4-0-0/`. ([blog.jquery.com][7]) - Download jQuery (latest version info; CDN + SRI guidance): `https://jquery.com/download/`. 
  • Network accessline 608
    - Download jQuery (latest version info; CDN + SRI guidance): `https://jquery.com/download/`. ([jquery.com][8])
  • Network accessline 609
    - jQuery API: `.html()`: `https://api.jquery.com/html/`. ([jQuery API][21])
  • Network accessline 610
    - jQuery API: `.text()`: `https://api.jquery.com/text/`. ([jQuery API][14])
  • Network accessline 611
    - jQuery API: `.append()`: `https://api.jquery.com/append/`. ([jQuery API][22])
  • Network accessline 612
    - jQuery API: `.load()` (script execution behavior): `https://api.jquery.com/load/`. ([jQuery API][3])
  • Network accessline 613
    - jQuery API: `jQuery.parseHTML(…, keepScripts)`: `https://api.jquery.com/jQuery.parseHTML/`. ([jQuery API][2])
  • Network accessline 614
    - jQuery API: `$.ajax()` (`jsonp: false` security note): `https://api.jquery.com/jQuery.ajax/`. ([jQuery API][5])
  • Network accessline 615
    - jQuery API: `$.getScript()` (executes script): `https://api.jquery.com/jQuery.getScript/`. ([jQuery API][4])
  • Network accessline 616
    - jQuery API: `jQuery.escapeSelector()`: `https://api.jquery.com/jQuery.escapeSelector/`. ([jQuery API][20])
  • Network accessline 620
    - NVD CVE-2019-11358 (prototype pollution; jQuery < 3.4.0): `https://nvd.nist.gov/vuln/detail/CVE-2019-11358`. ([NVD][13])
  • Network accessline 621
    - NVD CVE-2020-11022 (XSS risk in DOM manipulation methods; patched in 3.5.0): `https://nvd.nist.gov/vuln/detail/CVE-2020-11022`. ([NVD][1])
  • Network accessline 622
    - NVD CVE-2020-11023 (XSS risk involving `<option>`; patched in 3.5.0): `https://nvd.nist.gov/vuln/detail/CVE-2020-11023`. ([NVD][23])
  • Network accessline 623
    - GitHub Security Advisory GHSA-gxr4-xjj5-5px2 (jQuery htmlPrefilter XSS; patched in 3.5.0): `https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2`. ([GitHub][16])
  • Network accessline 627
    - XSS Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html`. ([OWASP Cheat Sheet Series][24])
  • Network accessline 628
    - DOM-based XSS Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html`. ([OWASP Cheat Sheet Series][25])
  • Network accessline 629
    - CSRF Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html`. ([OWASP Cheat Sheet Series][19])
  • Network accessline 630
    - HTTP Security Headers: `https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html`. ([OWASP Cheat Sheet Series][12])
  • Network accessline 631
    - Content Security Policy Cheat Sheet: `https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html`. ([OWASP Cheat Sheet Series][9])
  • Network accessline 635
    - MDN: Subresource Integrity (SRI): `https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity`. ([MDN Web Docs][26])
  • Network accessline 636
    - W3C: SRI specification: `https://www.w3.org/TR/sri-2/`. ([W3C][27])
  • Network accessline 637
    - MDN: CSP guide: `https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP`. ([MDN Web Docs][28])
  • Network accessline 638
    - MDN: `require-trusted-types-for` directive: `https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/require-trusted-types-for`. ([MDN Web Docs][11])
  • Network accessline 639
    - MDN: Trusted Types API: `https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API`. ([MDN Web Docs][29])
  • Network accessline 640
    - W3C: Trusted Types specification: `https://www.w3.org/TR/trusted-types/`. ([W3C][10])
  • Network accessline 641
    - MDN: `javascript:` URL scheme warning: `https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes/javascript`. ([MDN Web Docs][6])
  • Network accessline 642
    - DOMPurify project documentation: `https://github.com/cure53/DOMPurify`. ([GitHub][17])
  • Network accessline 644
    [1]: https://nvd.nist.gov/vuln/detail/cve-2020-11022 'CVE-2020-11022 Detail - NVD'
  • Network accessline 645
    [2]: https://api.jquery.com/jQuery.parseHTML/ 'jQuery.parseHTML()'
  • Network accessline 646
    [3]: https://api.jquery.com/load/ '.load() | jQuery API Documentation'
  • Network accessline 647
    [4]: https://api.jquery.com/jQuery.getScript/ 'jQuery.getScript()'
  • Network accessline 648
    [5]: https://api.jquery.com/jQuery.ajax/ 'jQuery.ajax()'
  • Network accessline 649
    [6]: https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes/javascript 'javascript: URLs - URIs - MDN Web Docs' [7]: https://blog.jquery.com/2026/01/17/jquery-4-0-0/ 'jQuery 4.0.0 | Official jQuery Blog' [8]: https://jquery.com/
  • Network accessline 650
    [7]: https://blog.jquery.com/2026/01/17/jquery-4-0-0/ 'jQuery 4.0.0 | Official jQuery Blog' [8]: https://jquery.com/download/ 'Download jQuery | jQuery' [9]: https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet
  • Network accessline 651
    [8]: https://jquery.com/download/ 'Download jQuery | jQuery'
  • Network accessline 652
    [9]: https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html 'Content Security Policy - OWASP Cheat Sheet Series'
  • Network accessline 653
    [10]: https://www.w3.org/TR/trusted-types/ 'Trusted Types'
  • Network accessline 654
    [11]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/require-trusted-types-for 'Content-Security-Policy: require-trusted-types-for directive'
  • Network accessline 655
    [12]: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html 'HTTP Security Response Headers Cheat Sheet'
  • Network accessline 656
    [13]: https://nvd.nist.gov/vuln/detail/cve-2019-11358 'CVE-2019-11358 Detail - NVD'
  • Network accessline 657
    [14]: https://api.jquery.com/text/ '.text() | jQuery API Documentation'
  • Network accessline 658
    [15]: https://api.jquery.com/val/ '.val() | jQuery API Documentation'
  • Network accessline 659
    [16]: https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2 'Potential XSS vulnerability in jQuery.htmlPrefilter and related methods · Advisory · jquery/jquery · GitHub'
  • Network accessline 660
    [17]: https://github.com/cure53/DOMPurify 'DOMPurify - a DOM-only, super-fast, uber-tolerant XSS ...'
  • Network accessline 661
    [18]: https://developer.mozilla.org/en-US/docs/Web/API/HTML_Sanitizer_API 'HTML Sanitizer API - MDN Web Docs'
  • Network accessline 662
    [19]: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html 'Cross-Site Request Forgery Prevention Cheat Sheet'
  • Network accessline 663
    [20]: https://api.jquery.com/jQuery.escapeSelector/ 'jQuery.escapeSelector()'
  • Network accessline 664
    [21]: https://api.jquery.com/html/ '.html() | jQuery API Documentation'
  • Network accessline 665
    [22]: https://api.jquery.com/append/ '.append() | jQuery API Documentation'
  • Network accessline 666
    [23]: https://nvd.nist.gov/vuln/detail/cve-2020-11023 'CVE-2020-11023 Detail - NVD'
  • Network accessline 667
    [24]: https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html 'Cross Site Scripting Prevention - OWASP Cheat Sheet Series'
  • Network accessline 668
    [25]: https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html 'DOM based XSS Prevention Cheat Sheet'
  • Network accessline 669
    [26]: https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity 'Subresource Integrity - Security - MDN Web Docs'
  • Network accessline 670
    [27]: https://www.w3.org/TR/sri-2/ 'Subresource Integrity'
  • Network accessline 671
    [28]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP 'Content Security Policy (CSP) - HTTP - MDN Web Docs'
  • Network accessline 672
    [29]: https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API 'Trusted Types API - MDN Web Docs'

packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-typescript-nextjs-web-server-security.md

  • Network accessline 197
    IMPORTANT: Any versions older than these minor versions are vulnerable to "react2shell" vulnerability (https://nextjs.org/blog/CVE-2025-66478):
  • Access to secretsline 226
    [Credential-related source omitted]
  • Access to secretsline 231
    [Credential-related source omitted]
  • Network accessline 712
    - MUST treat any server-side `fetch()` to a user-provided URL as high-risk.
  • Network accessline 723
    - `await fetch(req.query.url)` or `await fetch((await request.json()).url)`
  • Network accessline 728
    - Search for `fetch(` in server code and trace where the URL comes from.
  • Dangerous shell operationline 861
    - `exec("convert " + filename)`
  • Dangerous shell operationline 887
    - `eval(req.body.code)`
  • Dangerous shell operationline 892
    - Search for `eval(`, `new Function`, `vm.`, `require(` with non-literals.
  • Network accessline 972
    - Blindly cloning all request headers to an outbound `fetch()` call.
  • Network accessline 1008
    - Use a configured, allowlisted canonical app origin (e.g., `APP_ORIGIN=https://example.com`).
  • Network accessline 1076
    - SSRF:   - `fetch(userProvidedUrl)` from Route Handlers / Server Actions
  • Network accessline 1077
    - `fetch(userProvidedUrl)` from Route Handlers / Server Actions
  • Network accessline 1104
    - Next.js Docs: Installation (system requirements / Node version) — `https://nextjs.org/docs/app/getting-started/installation`
  • Network accessline 1105
    - Next.js Docs: Route Handlers — `https://nextjs.org/docs/app/getting-started/route-handlers`
  • Network accessline 1106
    - Next.js Docs: API Routes (Pages Router) — `https://nextjs.org/docs/pages/building-your-application/routing/api-routes`
  • Network accessline 1107
    - Next.js Docs: Environment Variables — `https://nextjs.org/docs/pages/guides/environment-variables`
  • Network accessline 1108
    - Next.js Docs: Data Security — `https://nextjs.org/docs/app/guides/data-security`
  • Network accessline 1109
    - Next.js Docs: Content Security Policy — `https://nextjs.org/docs/app/guides/content-security-policy`
  • Network accessline 1110
    - Next.js Docs: Proxy — `https://nextjs.org/docs/app/getting-started/proxy`
  • Network accessline 1111
    - Next.js Docs: `serverActions.allowedOrigins` and `serverActions.bodySizeLimit` — `https://nextjs.org/docs/app/api-reference/config/next-config-js/serverActions`
  • Network accessline 1112
    - Next.js Docs: `cookies()` — `https://nextjs.org/docs/app/api-reference/functions/cookies`
  • Network accessline 1113
    - Next.js Docs: `headers()` — `https://nextjs.org/docs/app/api-reference/functions/headers`
  • Network accessline 1114
    - Next.js Docs: Self-hosting (reverse proxy guidance) — `https://nextjs.org/docs/pages/guides/self-hosting`
  • Network accessline 1115
    - Next.js Docs: Support policy (supported versions/LTS) — `https://nextjs.org/docs/support-policy`
  • Network accessline 1119
    - Next.js Blog: How to think about security in Next.js — `https://nextjs.org/blog/security-nextjs-server-components-actions`
  • Network accessline 1120
    - GitHub Security Advisory: Next.js DoS via Server Components / Server Actions (CVE-2026-23864) — `https://github.com/advisories/GHSA-fq29-rrrv-cq2m`
  • Network accessline 1121
    - Next.js Blog: Security update (example security advisory context) — `https://nextjs.org/blog/security-update`
  • Network accessline 1125
    - OWASP Cheat Sheet Series (CSRF, Session Management, XSS Prevention, SSRF Prevention, File Upload, HTTP Headers) — `https://cheatsheetseries.owasp.org/`
  • Network accessline 1127
    [1]: https://nextjs.org/docs/app/getting-started/route-handlers 'Getting Started: Route Handlers | Next.js'
  • Network accessline 1128
    [2]: https://nextjs.org/docs/app/getting-started/deploying 'Getting Started: Deploying'
  • Network accessline 1129
    [3]: https://nextjs.org/docs/pages/building-your-application/routing/api-routes 'Routing: API Routes | Next.js'
  • Network accessline 1130
    [4]: https://nextjs.org/docs/app/api-reference/functions/headers 'Functions: headers | Next.js'
  • Network accessline 1131
    [5]: https://nextjs.org/docs/app/api-reference/config/next-config-js/serverActions 'next.config.js: serverActions | Next.js'
  • Network accessline 1132
    [6]: https://nextjs.org/blog/security-nextjs-server-components-actions 'How to Think About Security in Next.js | Next.js'
  • Network accessline 1133
    [7]: https://nextjs.org/docs/pages/guides/environment-variables 'Guides: Environment Variables | Next.js'
  • Network accessline 1134
    [8]: https://nextjs.org/docs/pages/guides/self-hosting 'Guides: Self-Hosting'
  • Network accessline 1135
    [9]: https://nextjs.org/docs/app/api-reference/functions/cookies 'Functions: cookies | Next.js'
  • Network accessline 1136
    [10]: https://nextjs.org/blog/next-16 'Next.js 16'
  • Network accessline 1137
    [11]: https://github.com/vercel/next.js/security/advisories/GHSA-9g9p-9gw9-jx7f 'Denial of Service in Image Optimizer · Advisory'
  • Network accessline 1138
    [12]: https://nextjs.org/docs/pages/guides/authentication 'Guides: Authentication | Next.js'

packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-typescript-react-web-frontend-security.md

  • Access to secretsline 152
    [Credential-related source omitted]
  • Network accessline 438
    - `<script src="https://cdn.example.com/lib/latest.js"></script>` with no integrity.
  • Network accessline 552
    - `fetch('/api/transfer', { method: 'POST', credentials: 'include' })` with no CSRF token/header, relying only on cookies.
  • Network accessline 622
    - `fetch(userProvidedUrl, { credentials: 'include' })`
  • Network accessline 628
    - Search for `fetch(` / `axios(` where the first argument or `baseURL` is derived from:
  • Dangerous shell operationline 761
    - `window.addEventListener('message', (e) => { eval(e.data) })`
  • Dangerous shell operationline 869
    - `eval(`, `new Function(`, `setTimeout("`, `setInterval("`
  • Network accessline 907
    - React 19 stable announcement — `https://react.dev/blog/2024/12/05/react-19` ([React][23])
  • Network accessline 908
    - React DOM docs: `dangerouslySetInnerHTML` warning — `https://react.dev/reference/react-dom/components/common#dangerouslysetting-the-inner-html` ([React][12])
  • Network accessline 909
    - React (legacy) JSX escaping statement — `https://legacy.reactjs.org/docs/introducing-jsx.html` ([React][14])
  • Network accessline 913
    - Cross Site Scripting Prevention (framework escape hatches; React `dangerouslySetInnerHTML`; URL validation notes) — `https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Seri
  • Network accessline 914
    - Content Security Policy — `https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][2])
  • Network accessline 915
    - Cross-Site Request Forgery Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][6])
  • Network accessline 916
    - HTML5 Security (Web Storage, postMessage, tabnabbing, sandboxed frames) — `https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][4])
  • Network accessline 917
    - Third Party JavaScript Management — `https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][5])
  • Network accessline 918
    - File Upload — `https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][19])
  • Network accessline 919
    - NPM Security best practices — `https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][22])
  • Network accessline 923
    - Trusted Types API — `https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API` ([MDN Web Docs][3])
  • Network accessline 924
    - W3C Trusted Types spec — `https://www.w3.org/TR/trusted-types/` ([W3C][15])
  • Network accessline 925
    - Subresource Integrity — `https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity` ([MDN Web Docs][7])
  • Network accessline 926
    - Clickjacking defenses overview — `https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Clickjacking` ([MDN Web Docs][8])
  • Network accessline 927
    - Using Service Workers (HTTPS requirement; proxy-like behavior) — `https://developer.mozilla.org/en-US/docs/Web/API/Service_Worker_API/Using_Service_Workers` ([MDN Web Docs][10])
  • Network accessline 928
    - Secure contexts (powerful APIs restricted to HTTPS) — `https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Secure_Contexts` ([MDN Web Docs][18])
  • Network accessline 929
    - Link `rel` values (noopener/noreferrer) — `https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/rel` ([MDN Web Docs][17])
  • Network accessline 933
    - Create React App env variables warning — `https://create-react-app.dev/docs/adding-custom-environment-variables/` ([create-react-app.dev][1])
  • Network accessline 934
    - Vite env variables security notes — `https://vite.dev/guide/env-and-mode` ([vitejs][11])
  • Network accessline 938
    - OAuth 2.0 for Browser-Based Apps (token storage discussion) — `https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps` ([IETF Datatracker][16])
  • Network accessline 942
    - npm audit docs — `https://docs.npmjs.com/cli/v10/commands/npm-audit/` ([npm Docs][20])
  • Network accessline 943
    - npm ci docs — `https://docs.npmjs.com/cli/v10/commands/npm-ci/` ([npm Docs][21])
  • Network accessline 947
    - DOMPurify — `https://github.com/cure53/DOMPurify` ([GitHub][13])
  • Network accessline 949
    [1]: https://create-react-app.dev/docs/adding-custom-environment-variables/ 'Adding Custom Environment Variables | Create React App'
  • Network accessline 950
    [2]: https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html 'Content Security Policy - OWASP Cheat Sheet Series'
  • Network accessline 951
    [3]: https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API 'Trusted Types API - Web APIs | MDN'
  • Network accessline 952
    [4]: https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html 'HTML5 Security - OWASP Cheat Sheet Series'
  • Network accessline 953
    [5]: https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html 'Third Party Javascript Management - OWASP Cheat Sheet Series'
  • Network accessline 954
    [6]: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html 'Cross-Site Request Forgery Prevention - OWASP Cheat Sheet Series'
  • Network accessline 955
    [7]: https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity 'Subresource Integrity - Security | MDN'
  • Network accessline 956
    [8]: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Clickjacking 'Clickjacking - Security | MDN'
  • Network accessline 957
    [9]: https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html 'Cross Site Scripting Prevention - OWASP Cheat Sheet Series'
  • Network accessline 958
    [10]: https://developer.mozilla.org/en-US/docs/Web/API/Service_Worker_API/Using_Service_Workers 'Using Service Workers - Web APIs | MDN'
  • Network accessline 959
    [11]: https://vite.dev/guide/env-and-mode 'Env Variables and Modes | Vite'
  • Network accessline 960
    [12]: https://react.dev/reference/react-dom/components/common 'Common components (e.g. <div>) – React'
  • Network accessline 961
    [13]: https://github.com/cure53/DOMPurify 'GitHub - cure53/DOMPurify: DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and h
  • Network accessline 962
    [14]: https://legacy.reactjs.org/docs/introducing-jsx.html 'Introducing JSX – React'
  • Network accessline 963
    [15]: https://www.w3.org/TR/trusted-types/ 'Trusted Types'
  • Network accessline 964
    [16]: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps '
  • Network accessline 968
    ' [17]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel 'HTML attribute: rel - HTML | MDN'
  • Network accessline 969
    [17]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel 'HTML attribute: rel - HTML | MDN'
  • Network accessline 970
    [18]: https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Secure_Contexts 'Secure contexts - Security | MDN'
  • Network accessline 971
    [19]: https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html 'File Upload - OWASP Cheat Sheet Series'
  • Network accessline 972
    [20]: https://docs.npmjs.com/cli/v10/commands/npm-audit 'npm-audit | npm Docs'
  • Network accessline 973
    [21]: https://docs.npmjs.com/cli/v10/commands/npm-ci 'npm-ci | npm Docs'
  • Network accessline 974
    [22]: https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet.html 'NPM Security - OWASP Cheat Sheet Series'
  • Network accessline 975
    [23]: https://react.dev/blog/2024/12/05/react-19 'React v19 – React'

packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-typescript-vue-web-frontend-security.md

  • Access to secretsline 186
    [Credential-related source omitted]
  • Access to secretsline 192
    [Credential-related source omitted]
  • Network accessline 502
    - `fetch(url, { credentials: 'include', method: 'POST', body: ... })` with no CSRF token/header usage anywhere.
  • Access to secretsline 532
    [Credential-related source omitted]
  • Network accessline 634
    - `<script src="https://cdn.example/...">` with no `integrity`.
  • Network accessline 639
    - Search `index.html` and server templates for `https://` script/style tags.
  • Access to secretsline 711
    [Credential-related source omitted]
  • Network accessline 751
    - Vue Docs: Security — `https://vuejs.org/guide/best-practices/security` ([Vue.js][1])
  • Network accessline 752
    - Vue Docs: Template Syntax (security warning about in-DOM templates) — `https://vuejs.org/guide/essentials/template-syntax` ([Vue.js][13])
  • Network accessline 753
    - Vue Docs: Production Deployment — `https://vuejs.org/guide/best-practices/production-deployment` ([Vue.js][3])
  • Network accessline 754
    - Vue Docs: Feature Flags — `https://link.vuejs.org/feature-flags` ([Vue.js][7])
  • Network accessline 758
    - Vite Docs: Env Variables and Modes (VITE\_\* exposure + security notes) — `https://vite.dev/guide/env-and-mode` ([vitejs][2])
  • Network accessline 759
    - Vite Docs: CLI (`vite preview` not designed for production) — `https://vite.dev/guide/cli` ([vitejs][5])
  • Network accessline 760
    - Vite Docs: Server Options (`server.host` can listen on public addresses) — `https://vite.dev/config/server-options` ([vitejs][14])
  • Network accessline 764
    - OWASP Cheat Sheet Series: XSS Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html` ([Vue.js][1])
  • Network accessline 765
    - OWASP Cheat Sheet Series: CSRF Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][9])
  • Network accessline 766
    - OWASP Cheat Sheet Series: Authorization — `https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][8])
  • Network accessline 767
    - OWASP Cheat Sheet Series: HTTP Headers — `https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][4])
  • Network accessline 768
    - HTML5 Security Cheat Sheet (referenced by Vue) — `https://html5sec.org/` ([Vue.js][1])
  • Network accessline 772
    - MDN: `rel="noopener"` — `https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel/noopener` ([MDN Web Docs][12])
  • Network accessline 773
    - MDN: Subresource Integrity — `https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity` ([MDN Web Docs][11])
  • Network accessline 774
    - web.dev: Trusted Types — `https://web.dev/trusted-types/` ([web.dev][10])
  • Network accessline 776
    [1]: https://vuejs.org/guide/best-practices/security 'https://vuejs.org/guide/best-practices/security'
  • Network accessline 777
    [2]: https://vite.dev/guide/env-and-mode 'https://vite.dev/guide/env-and-mode'
  • Network accessline 778
    [3]: https://vuejs.org/guide/best-practices/production-deployment 'https://vuejs.org/guide/best-practices/production-deployment'
  • Network accessline 779
    [4]: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html'
  • Network accessline 780
    [5]: https://vite.dev/guide/cli 'https://vite.dev/guide/cli'
  • Network accessline 781
    [6]: https://vite.dev/guide/build 'https://vite.dev/guide/build'
  • Network accessline 782
    [7]: https://vuejs.org/guide/best-practices/production-deployment 'Production Deployment'
  • Network accessline 783
    [8]: https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html'
  • Network accessline 784
    [9]: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html'
  • Network accessline 785
    [10]: https://web.dev/articles/trusted-types 'https://web.dev/articles/trusted-types'
  • Network accessline 786
    [11]: https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity 'Subresource Integrity - Security - MDN Web Docs'
  • Network accessline 787
    [12]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel/noopener 'https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel/noopener'
  • Network accessline 788
    [13]: https://vuejs.org/guide/essentials/template-syntax 'Template Syntax | Vue.js'
  • Network accessline 789
    [14]: https://vite.dev/config/server-options 'https://vite.dev/config/server-options'

packages/skills-catalog/skills/(security)/security-best-practices/references/python-django-web-server-security.md

  • Access to secretsline 170
    [Credential-related source omitted]
  • Access to secretsline 199
    [Credential-related source omitted]
  • Network accessline 853
    - Django Downloads (current stable & supported branches): https://www.djangoproject.com/download/
  • Network accessline 854
    - Django 6.0 Release Notes: https://docs.djangoproject.com/en/6.0/releases/6.0/
  • Network accessline 855
    - Django: Deployment checklist (incl. check --deploy, runserver warning, HTTPS/cookies guidance): https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/
  • Network accessline 856
    - Django: Settings reference (SecurityMiddleware settings, cookies, SECRET_KEY_FALLBACKS, CSP settings): https://docs.djangoproject.com/en/6.0/ref/settings/
  • Network accessline 857
    - Django: Security in Django (XSS/CSRF/SQLi/clickjacking/HTTPS/host header validation/uploads/CSP): https://docs.djangoproject.com/en/6.0/topics/security/
  • Network accessline 858
    - Django: CSRF how-to (middleware, csrf_token usage, AJAX header patterns, csrf_exempt cautions): https://docs.djangoproject.com/en/6.0/howto/csrf/
  • Network accessline 859
    - Django: Performing raw SQL queries (parameterization guidance): https://docs.djangoproject.com/en/6.0/topics/db/sql/
  • Network accessline 860
    - Django: QuerySet API reference (extra() cautions; “do not quote placeholders” guidance): https://docs.djangoproject.com/en/6.0/ref/models/querysets/
  • Network accessline 861
    - Django: Template built-ins (autoescape tag): https://docs.djangoproject.com/en/6.0/ref/templates/builtins/
  • Network accessline 862
    - Django: Template language reference (turning off autoescape & risks): https://docs.djangoproject.com/en/6.0/ref/templates/language/
  • Network accessline 863
    - Django: Utilities reference (e.g., format_html): https://docs.djangoproject.com/en/6.0/ref/utils/
  • Network accessline 869
    - OWASP Cheat Sheet Series: Django Security Cheat Sheet: https://cheatsheetseries.owasp.org/cheatsheets/Django_Security_Cheat_Sheet.html
  • Network accessline 872
    [1]: https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/ 'https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/'
  • Network accessline 873
    [2]: https://docs.djangoproject.com/en/6.0/topics/security/ 'Security in Django | Django documentation | Django'
  • Network accessline 874
    [3]: https://docs.djangoproject.com/en/6.0/ref/settings/ 'Settings | Django documentation | Django'
  • Network accessline 875
    [4]: https://docs.djangoproject.com/en/6.0/howto/csrf/ 'How to use Django’s CSRF protection | Django documentation | Django'
  • Network accessline 876
    [5]: https://docs.djangoproject.com/en/6.0/ref/templates/builtins/ 'https://docs.djangoproject.com/en/6.0/ref/templates/builtins/'
  • Network accessline 877
    [6]: https://docs.djangoproject.com/en/6.0/ref/utils/ 'https://docs.djangoproject.com/en/6.0/ref/utils/'
  • Network accessline 878
    [7]: https://docs.djangoproject.com/en/6.0/topics/db/sql/ 'https://docs.djangoproject.com/en/6.0/topics/db/sql/' [8]: https://docs.djangoproject.com/en/6.0/ref/models/querysets/ 'https://docs.djangoproject.com/en/6.0/ref/models/querysets/' 
  • Network accessline 879
    [8]: https://docs.djangoproject.com/en/6.0/ref/models/querysets/ 'https://docs.djangoproject.com/en/6.0/ref/models/querysets/'
  • Network accessline 880
    [9]: https://www.djangoproject.com/download/ 'Download Django | Django'

packages/skills-catalog/skills/(security)/security-best-practices/references/python-fastapi-web-server-security.md

  • Access to secretsline 239
    [Credential-related source omitted]
  • Access to secretsline 244
    [Credential-related source omitted]
  • Network accessline 812
    - `httpx.get(request.query_params["url"])`
  • Access to secretsline 915
    [Credential-related source omitted]
  • Network accessline 962
    - FastAPI (PyPI metadata, versioning) — `https://pypi.org/project/fastapi/` ([PyPI][1])
  • Network accessline 963
    - FastAPI docs: Security “First Steps” (Authorization Bearer header conventions) — `https://fastapi.tiangolo.com/tutorial/security/first-steps/` ([FastAPI][11])
  • Network accessline 964
    - FastAPI reference: Dependencies (`Depends`, `Security`) — `https://fastapi.tiangolo.com/reference/dependencies/` ([FastAPI][7])
  • Network accessline 965
    - FastAPI reference: APIRouter (router-level dependencies) — `https://fastapi.tiangolo.com/reference/apirouter/` ([FastAPI][28])
  • Network accessline 966
    - FastAPI docs: WebSockets — `https://fastapi.tiangolo.com/advanced/websockets/` ([FastAPI][27])
  • Network accessline 970
    - Starlette (PyPI, general capabilities) — `https://pypi.org/project/starlette/` ([PyPI][5])
  • Network accessline 971
    - Starlette docs: WebSockets — `https://starlette.dev/websockets/` ([Starlette][3])
  • Network accessline 972
    - Uvicorn (PyPI metadata) — `https://pypi.org/project/uvicorn/` ([PyPI][4])
  • Network accessline 973
    - Pydantic docs (v2.12.x) — `https://docs.pydantic.dev/latest/` ([Pydantic][29])
  • Network accessline 977
    - OWASP Cheat Sheet Series: Session Management — `https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][8])
  • Network accessline 978
    - OWASP Cheat Sheet Series: CSRF Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][2])
  • Network accessline 979
    - OWASP Cheat Sheet Series: XSS Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][16])
  • Network accessline 980
    - OWASP Cheat Sheet Series: Mass Assignment — `https://cheatsheetseries.owasp.org/cheatsheets/Mass_Assignment_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][14])
  • Network accessline 981
    - OWASP API Security Top 10 (2023) — `https://owasp.org/API-Security/editions/2023/en/0x11-t10/` ([OWASP Foundation][13])
  • Network accessline 982
    - OWASP Cheat Sheet Series: SQL Injection Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][21])
  • Network accessline 983
    - OWASP Cheat Sheet Series: OS Command Injection Defense — `https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][22])
  • Network accessline 984
    - OWASP Cheat Sheet Series: SSRF Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][23])
  • Network accessline 985
    - OWASP Cheat Sheet Series: File Upload — `https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][20])
  • Network accessline 986
    - OWASP Cheat Sheet Series: Unvalidated Redirects and Forwards — `https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][24])
  • Network accessline 987
    - OWASP Cheat Sheet Series: HTTP Security Response Headers — `https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][6])
  • Network accessline 988
    - OWASP Cheat Sheet Series: WebSocket Security — `https://cheatsheetseries.owasp.org/cheatsheets/WebSocket_Security_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][25])
  • Network accessline 989
    - OWASP WSTG: Testing for Server-Side Template Injection — `https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server_Side_Template_Injection` ([OWASP F
  • Network accessline 990
    - OWASP WSTG: Testing WebSockets — `https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/11-Client-side_Testing/10-Testing_WebSockets` ([OWASP Foundation][26])
  • Network accessline 994
    - Jinja: Sandbox — `https://jinja.palletsprojects.com/en/stable/sandbox/` ([jinja.palletsprojects.com][18])
  • Network accessline 998
    - CVE-2023-29159 (StaticFiles path traversal; fixed 0.27.0) — `https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2023-29159/` ([advisories.gitlab.com][10])
  • Network accessline 999
    - CVE-2024-47874 (multipart/form-data DoS; fixed 0.40.0) — `https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2024-47874/` ([advisories.gitlab.com][9])
  • Network accessline 1000
    - CVE-2025-62727 (FileResponse Range header DoS; fixed 0.49.1) — `https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2025-62727/` ([advisories.gitlab.com][19])
  • Network accessline 1002
    [1]: https://pypi.org/project/fastapi/ 'https://pypi.org/project/fastapi/'
  • Network accessline 1003
    [2]: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html'
  • Network accessline 1004
    [3]: https://starlette.dev/websockets/ 'Websockets'
  • Network accessline 1005
    [4]: https://pypi.org/project/uvicorn/ 'https://pypi.org/project/uvicorn/'
  • Network accessline 1006
    [5]: https://pypi.org/project/starlette/ 'https://pypi.org/project/starlette/'
  • Network accessline 1007
    [6]: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html 'HTTP Security Response Headers Cheat Sheet'
  • Network accessline 1008
    [7]: https://fastapi.tiangolo.com/reference/dependencies/ 'Dependencies - Depends() and Security() - FastAPI'
  • Network accessline 1009
    [8]: https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html'
  • Network accessline 1010
    [9]: https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2024-47874/ 'Starlette Denial of service (DoS) via multipart/form-data | GitLab Advisory Database'
  • Network accessline 1011
    [10]: https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2023-29159/ 'Starlette has Path Traversal vulnerability in StaticFiles | GitLab Advisory Database'
  • Network accessline 1012
    [11]: https://fastapi.tiangolo.com/tutorial/security/first-steps/ 'Security - First Steps - FastAPI'
  • Network accessline 1013
    [12]: https://fastapi.tiangolo.com/tutorial/response-model/ 'https://fastapi.tiangolo.com/tutorial/response-model/'
  • Network accessline 1014
    [13]: https://owasp.org/API-Security/editions/2023/en/0x11-t10/ 'https://owasp.org/API-Security/editions/2023/en/0x11-t10/'
  • Network accessline 1015
    [14]: https://cheatsheetseries.owasp.org/cheatsheets/Mass_Assignment_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Mass_Assignment_Cheat_Sheet.html'
  • Network accessline 1016
    [15]: https://fastapi.tiangolo.com/tutorial/extra-models/ 'https://fastapi.tiangolo.com/tutorial/extra-models/'
  • Network accessline 1017
    [16]: https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html'
  • Network accessline 1018
    [17]: https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server_Side_Template_Injection 'Testing for Server Side Template Injection'
  • Network accessline 1019
    [18]: https://jinja.palletsprojects.com/en/stable/sandbox/ 'Sandbox — Jinja Documentation (3.1.x)'
  • Network accessline 1020
    [19]: https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2025-62727/ 'Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse`` | GitLab Advisory Database'
  • Network accessline 1021
    [20]: https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html'
  • Network accessline 1022
    [21]: https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html'
  • Network accessline 1023
    [22]: https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html'
  • Network accessline 1024
    [23]: https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html'
  • Network accessline 1025
    [24]: https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html 'Unvalidated Redirects and Forwards Cheat Sheet'
  • Network accessline 1026
    [25]: https://cheatsheetseries.owasp.org/cheatsheets/WebSocket_Security_Cheat_Sheet.html 'WebSocket Security - OWASP Cheat Sheet Series'
  • Network accessline 1027
    [26]: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/11-Client-side_Testing/10-Testing_WebSockets 'WSTG - Latest | OWASP Foundation'
  • Network accessline 1028
    [27]: https://fastapi.tiangolo.com/advanced/websockets/ 'WebSockets - FastAPI'
  • Network accessline 1029
    [28]: https://fastapi.tiangolo.com/reference/apirouter/ 'APIRouter class - FastAPI'
  • Network accessline 1030
    [29]: https://docs.pydantic.dev/latest/ 'https://docs.pydantic.dev/latest/'

packages/skills-catalog/skills/(security)/security-best-practices/references/python-flask-web-server-security.md

  • Network accessline 639
    - `requests.get(request.args["url"])`
  • Network accessline 801
    - Flask Docs: Deploying to Production — https://flask.palletsprojects.com/en/stable/deploying/
  • Network accessline 802
    - Flask Docs: Debugging Application Errors — https://flask.palletsprojects.com/en/stable/debugging/
  • Network accessline 803
    - Flask Docs: Configuration Handling — https://flask.palletsprojects.com/en/stable/config/
  • Network accessline 804
    - Flask Docs: Security Considerations — https://flask.palletsprojects.com/en/stable/web-security/
  • Network accessline 805
    - Flask Docs: Tell Flask it is Behind a Proxy — https://flask.palletsprojects.com/en/stable/deploying/proxy_fix/
  • Network accessline 806
    - Flask API Docs: Sessions — https://flask.palletsprojects.com/en/stable/api/#sessions
  • Network accessline 810
    - Werkzeug Docs: Utilities (send_file / send_from_directory / safe_join / secure_filename / password hashing) — https://werkzeug.palletsprojects.com/en/stable/utils/
  • Network accessline 811
    - GitHub Advisory: CVE-2025-66221 (Werkzeug safe_join Windows device names) — https://github.com/advisories/GHSA-hgf8-39gv-g3f2
  • Network accessline 815
    - Session Management — https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html
  • Network accessline 816
    - CSRF Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
  • Network accessline 817
    - XSS Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html
  • Network accessline 818
    - Input Validation — https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html
  • Network accessline 819
    - SQL Injection Prevention — https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html
  • Network accessline 820
    - Injection Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_Cheat_Sheet.html
  • Network accessline 821
    - OS Command Injection Defense — https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html
  • Network accessline 822
    - SSRF Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html
  • Network accessline 823
    - File Upload — https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html
  • Network accessline 824
    - Unvalidated Redirects — https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html
  • Network accessline 825
    - HTTP Headers — https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html
  • Network accessline 829
    - Jinja: Sandbox (rendering untrusted templates) — https://jinja.palletsprojects.com/en/stable/sandbox/
  • Network accessline 830
    - OWASP WSTG: Testing for Server-Side Template Injection — https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server_Side_Template_Injection
  • Network accessline 831
    - PortSwigger Web Security Academy: Server-side template injection — https://portswigger.net/web-security/server-side-template-injection
  • Network accessline 835
    - RFC 9110: HTTP Semantics (safe methods) — https://www.rfc-editor.org/rfc/rfc9110

packages/skills-catalog/skills/(security)/security-ownership-map/LICENSE.txt

  • Network accessline 1
    Apache License Version 2.0, January 2004 http://www.apache.org/licenses/
  • Network accessline 3
    http://www.apache.org/licenses/
  • Network accessline 195
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(security)/security-ownership-map/scripts/build_ownership_map.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(security)/security-ownership-map/scripts/community_maintainers.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(security)/security-ownership-map/scripts/query_ownership.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(security)/security-ownership-map/scripts/run_ownership_map.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(security)/security-threat-model/LICENSE.txt

  • Network accessline 1
    Apache License Version 2.0, January 2004 http://www.apache.org/licenses/
  • Network accessline 3
    http://www.apache.org/licenses/
  • Network accessline 195
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(tooling)/excalidraw-studio/SKILL.md

  • Network accessline 163
    To view:    1. Visit https://excalidraw.com → Open → drag and drop the file
  • Network accessline 164
    1. Visit https://excalidraw.com → Open → drag and drop the file

packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/business-flow-swimlane-template.json

  • Network accessline 2
    "type": "excalidraw",   "version": 2,   "source": "https://excalidraw.com",
  • Network accessline 3
    "version": 2,   "source": "https://excalidraw.com",   "elements": [
  • Network accessline 4
    "source": "https://excalidraw.com",

packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/class-diagram-template.json

  • Network accessline 2
    "type": "excalidraw",   "version": 2,   "source": "https://excalidraw.com",
  • Network accessline 3
    "version": 2,   "source": "https://excalidraw.com",   "elements": [
  • Network accessline 4
    "source": "https://excalidraw.com",

packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/data-flow-diagram-template.json

  • Network accessline 2
    "type": "excalidraw",   "version": 2,   "source": "https://excalidraw.com",
  • Network accessline 3
    "version": 2,   "source": "https://excalidraw.com",   "elements": [
  • Network accessline 4
    "source": "https://excalidraw.com",

packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/er-diagram-template.json

  • Network accessline 2
    "type": "excalidraw",   "version": 2,   "source": "https://excalidraw.com",
  • Network accessline 3
    "version": 2,   "source": "https://excalidraw.com",   "elements": [
  • Network accessline 4
    "source": "https://excalidraw.com",

packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/flowchart-template.json

  • Network accessline 2
    "type": "excalidraw",   "version": 2,   "source": "https://excalidraw.com",
  • Network accessline 3
    "version": 2,   "source": "https://excalidraw.com",   "elements": [
  • Network accessline 4
    "source": "https://excalidraw.com",

packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/mindmap-template.json

  • Network accessline 2
    "type": "excalidraw",   "version": 2,   "source": "https://excalidraw.com",
  • Network accessline 3
    "version": 2,   "source": "https://excalidraw.com",   "elements": [
  • Network accessline 4
    "source": "https://excalidraw.com",

packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/relationship-template.json

  • Network accessline 2
    "type": "excalidraw",   "version": 2,   "source": "https://excalidraw.com",
  • Network accessline 3
    "version": 2,   "source": "https://excalidraw.com",   "elements": [
  • Network accessline 4
    "source": "https://excalidraw.com",

packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/sequence-diagram-template.json

  • Network accessline 2
    "type": "excalidraw",   "version": 2,   "source": "https://excalidraw.com",
  • Network accessline 3
    "version": 2,   "source": "https://excalidraw.com",   "elements": [
  • Network accessline 4
    "source": "https://excalidraw.com",

packages/skills-catalog/skills/(tooling)/excalidraw-studio/references/excalidraw-schema.md

  • Network accessline 9
    "type": "excalidraw",   "version": 2,   "source": "https://excalidraw.com",
  • Network accessline 10
    "version": 2,   "source": "https://excalidraw.com",   "elements": [],
  • Network accessline 11
    "source": "https://excalidraw.com",
  • Network accessline 368
    Excalidraw's native color picker is built around [Open Colors](https://yeun.github.io/open-colors/). Use shade-2 for fills and shade-8 for matching strokes to create depth.
  • Network accessline 705
    "type": "excalidraw",   "version": 2,   "source": "https://excalidraw.com",
  • Network accessline 706
    "version": 2,   "source": "https://excalidraw.com",   "elements": [
  • Network accessline 707
    "source": "https://excalidraw.com",

packages/skills-catalog/skills/(tooling)/excalidraw-studio/references/icon-libraries.md

  • Network accessline 107
    - Visit: <https://libraries.excalidraw.com/> - Search for the desired icon set (e.g., "AWS Architecture Icons") - Click download to get the `.excalidrawlib` file
  • Network accessline 154
    This workflow works with any valid `.excalidrawlib` file from <https://libraries.excalidraw.com/>. Common categories:

packages/skills-catalog/skills/(tooling)/excalidraw-studio/scripts/.gitignore

  • Executable scriptline 1
    Executable file

packages/skills-catalog/skills/(tooling)/excalidraw-studio/scripts/README.md

  • Network accessline 28
    2. **Download and place library file**:    - Visit: <https://libraries.excalidraw.com/>
  • Network accessline 29
    - Visit: <https://libraries.excalidraw.com/>    - Search for "AWS Architecture Icons" and download the `.excalidrawlib` file    - Rename it to match the directory name: `aws-architecture-icons.excalidrawlib`
  • Network accessline 72
    1. Download desired Excalidraw libraries from <https://libraries.excalidraw.com/>
  • Network accessline 79
    - Examples found on <https://libraries.excalidraw.com/> may include cloud/service icon sets.

packages/skills-catalog/skills/(tooling)/excalidraw-studio/scripts/add-arrow.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(tooling)/excalidraw-studio/scripts/add-icon-to-diagram.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(tooling)/excalidraw-studio/scripts/split-excalidraw-library.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(tooling)/gh-fix-ci/LICENSE.txt

  • Network accessline 1
    Apache License Version 2.0, January 2004 http://www.apache.org/licenses/
  • Network accessline 3
    http://www.apache.org/licenses/
  • Network accessline 195
    http://www.apache.org/licenses/LICENSE-2.0

packages/skills-catalog/skills/(tooling)/gh-fix-ci/SKILL.md

  • Network accessline 71
    - `python "<path-to-skill>/scripts/inspect_pr_checks.py" --repo "." --pr "123"` - `python "<path-to-skill>/scripts/inspect_pr_checks.py" --repo "." --pr "https://github.com/org/repo/pull/123" --json`
  • Network accessline 72
    - `python "<path-to-skill>/scripts/inspect_pr_checks.py" --repo "." --pr "https://github.com/org/repo/pull/123" --json`

packages/skills-catalog/skills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py

  • Executable scriptline 1
    #!/usr/bin/env python3

packages/skills-catalog/skills/(tooling)/mermaid-studio/references/aws-architecture.md

  • Network accessline 162
    **Note:** Not all AWS services have icons in the `logos` pack. If a specific icon is not available, use the closest category-appropriate built-in icon as fallback. You can verify icon availability at https://icon-sets.iconify.design/?q=aws.
  • Network accessline 315
    {     name: 'logos',     loader: () => fetch('https://unpkg.com/@iconify-json/logos/icons.json').then((res) => res.json()),
  • Network accessline 316
    name: 'logos',     loader: () => fetch('https://unpkg.com/@iconify-json/logos/icons.json').then((res) => res.json()),   },
  • Network accessline 317
    loader: () => fetch('https://unpkg.com/@iconify-json/logos/icons.json').then((res) => res.json()),

packages/skills-catalog/skills/(tooling)/mermaid-studio/references/diagram-types.md

  • Network accessline 102
    click A "https://example.com" "Tooltip text" _blank

packages/skills-catalog/skills/(tooling)/mermaid-studio/scripts/batch.mjs

  • Executable scriptline 1
    #!/usr/bin/env node

packages/skills-catalog/skills/(tooling)/mermaid-studio/scripts/render-ascii.mjs

  • Executable scriptline 1
    #!/usr/bin/env node

packages/skills-catalog/skills/(tooling)/mermaid-studio/scripts/render.mjs

  • Executable scriptline 1
    #!/usr/bin/env node
  • Network accessline 126
    const ICON_PACK_URLS = {   logos: "https://unpkg.com/@iconify-json/logos/icons.json",
  • Network accessline 127
    logos: "https://unpkg.com/@iconify-json/logos/icons.json",
  • Network accessline 128
    fa: "https://unpkg.com/@iconify-json/fa6-regular/icons.json",
  • Network accessline 129
    "fa-solid": "https://unpkg.com/@iconify-json/fa6-solid/icons.json",
  • Network accessline 130
    "fa-brands": "https://unpkg.com/@iconify-json/fa6-brands/icons.json",
  • Network accessline 131
    mdi: "https://unpkg.com/@iconify-json/mdi/icons.json",
  • Network accessline 132
    "simple-icons": "https://unpkg.com/@iconify-json/simple-icons/icons.json",
  • Network accessline 318
    .map(         (name) =>           `{ name: '${name}', loader: () => fetch('${ICON_PACK_URLS[name]}').then(r => r.json()) }`
  • Network accessline 319
    (name) =>           `{ name: '${name}', loader: () => fetch('${ICON_PACK_URLS[name]}').then(r => r.json()) }`       )
  • Network accessline 320
    `{ name: '${name}', loader: () => fetch('${ICON_PACK_URLS[name]}').then(r => r.json()) }`
  • Network accessline 346
    <div id="container"></div>   <script type="module">     import mermaid from 'https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs';
  • Network accessline 348
    import mermaid from 'https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs';

packages/skills-catalog/skills/(tooling)/mermaid-studio/scripts/setup.sh

  • Executable scriptline 1
    #!/usr/bin/env bash
  • Network accessline 15
    if ! command -v node &>/dev/null; then     echo "ERROR: Node.js is required but not found."     echo "Install Node.js 18+ from https://nodejs.org"
  • Network accessline 16
    echo "ERROR: Node.js is required but not found."     echo "Install Node.js 18+ from https://nodejs.org"     exit 1
  • Network accessline 17
    echo "Install Node.js 18+ from https://nodejs.org"

packages/skills-catalog/skills/(tooling)/mermaid-studio/scripts/validate.mjs

  • Executable scriptline 1
    #!/usr/bin/env node

packages/skills-catalog/skills/(tooling)/nx-ci-monitor/SKILL.md

  • Network accessline 48
    [ci-monitor] Nx Cloud not connected. Unlock 70% faster CI and auto-fix broken PRs with https://nx.dev/nx-cloud

packages/skills-catalog/skills/(tooling)/nx-workspace/reference/best-practices.md

  • Dangerous shell operationline 450
    rm migrations.json

packages/skills-catalog/skills/(tooling)/nx-workspace/reference/ci-cd.md

  • Access to secretsline 18
    [Credential-related source omitted]
  • Access to secretsline 139
    [Credential-related source omitted]
  • Access to secretsline 202
    [Credential-related source omitted]
  • Access to secretsline 281
    [Credential-related source omitted]
  • Access to secretsline 343
    [Credential-related source omitted]

packages/skills-catalog/skills/(tooling)/nx-workspace/reference/commands.md

  • Dangerous shell operationline 220
    rm -rf .nx/cache

packages/skills-catalog/skills/(web-automation)/demo/SKILL.md

  • Network accessline 44
    1. For form 1, read the views/routes of the flow to pick stable locators, and work out how to sign in (and with which test account) from the project's code and docs (AGENTS.md, README; `/demo init` sets that up). Then write the demo script 
  • Network accessline 45
    2. Record: `$SKILL_DIR/scripts/record <name>`. The first run builds the Docker image (tag hashed from the assets, so edits rebuild automatically). Before launching the browser the recorder checks that `app.url` (unset, `http://localhost:$PO
  • Network accessline 93
    Create it with every default documented in place with `/demo init` (`$SKILL_DIR/scripts/config`), then edit or delete lines. It never overwrites an existing file. The file's comments are the reference for each key; defaults and pace presets

packages/skills-catalog/skills/(web-automation)/demo/assets/config.mjs

  • Executable scriptline 1
    Executable file
  • Network accessline 37
    export const DEFAULTS = {   app: { url: `http://localhost:${process.env.PORT || 3000}` },
  • Network accessline 38
    app: { url: `http://localhost:${process.env.PORT || 3000}` },
  • Network accessline 157
    // Where the app under demo is served. Unset, it is http://localhost:$PORT,
  • Network accessline 159
    // is the host's localhost: the recorder shares the host network on Linux     // and forwards to host.docker.internal on macOS.     // url: 'http://localhost:3000'
  • Network accessline 161
    // url: 'http://localhost:3000'

packages/skills-catalog/skills/(web-automation)/demo/assets/docker/Dockerfile

  • Executable scriptline 1
    Executable file
  • Dangerous shell operationline 4
    RUN apt-get update && apt-get install -y --no-install-recommends        xvfb x11-utils xdotool ffmpeg dbus-x11 procps socat        xfwm4 xfce4-panel xfce4-settings feh papirus-icon-theme fonts-dejavu-core      && rm -rf /var/lib/apt/lists/*
  • Dangerous shell operationline 7
    && rm -rf /var/lib/apt/lists/*

packages/skills-catalog/skills/(web-automation)/demo/assets/docker/package.json

  • Executable scriptline 1
    Executable file

packages/skills-catalog/skills/(web-automation)/demo/assets/docker/record.sh

  • Executable scriptline 1
    #!/usr/bin/env bash
  • Dangerous shell operationline 13
    rm -f "$PARTIAL_VIDEO" "$EVENTS_OUT" "$FAILED_OUT.png" "$FAILED_OUT.json"
  • Dangerous shell operationline 29
    rm -f "$RUN_DIR/demo.config.mjs"
  • Dangerous shell operationline 39
    eval "$CONFIG_ENV"
  • Network accessline 49
    trap 'kill "$SOCAT_PID" 2>/dev/null || true' EXIT     for _ in $(seq 1 50); do       (exec 3<>"/dev/tcp/127.0.0.1/$APP_PORT") 2>/dev/null && break
  • Network accessline 50
    for _ in $(seq 1 50); do       (exec 3<>"/dev/tcp/127.0.0.1/$APP_PORT") 2>/dev/null && break       sleep 0.1
  • Dangerous shell operationline 51
    (exec 3<>"/dev/tcp/127.0.0.1/$APP_PORT") 2>/dev/null && break
  • Network accessline 51
    (exec 3<>"/dev/tcp/127.0.0.1/$APP_PORT") 2>/dev/null && break
  • Network accessline 58
    if ! node -e 'fetch(process.env.APP_URL, { redirect: "manual", signal: AbortSignal.timeout(5000) }).catch(() => process.exit(1))'; then
  • Dangerous shell operationline 80
    eval "$(dbus-launch --sh-syntax)"
  • Dangerous shell operationline 96
    rm -f "$RECORD_SIGNAL" "$RECORD_SIGNAL.started" "$RECORD_SIGNAL.stop" "$RECORD_SIGNAL.stopped"
  • Dangerous shell operationline 180
    rm -f "$PARTIAL_VIDEO" "$EVENTS_OUT"

packages/skills-catalog/skills/(web-automation)/demo/assets/lib.mjs

  • Executable scriptline 1
    Executable file
  • Dangerous shell operationline 10
    const xdo = (...args) => exec('xdotool', args.map(String))

packages/skills-catalog/skills/(web-automation)/demo/references/init.md

  • Network accessline 6
    2. Read the project's agent docs (AGENTS.md, CLAUDE.md, README) and check that they cover what a demo needs:    - **Start**: the command that starts the app locally.    - **URL**: where it serves. The recorder uses `http://localhost:$PORT` 
  • Network accessline 7
    - **Start**: the command that starts the app locally.    - **URL**: where it serves. The recorder uses `http://localhost:$PORT` (environment, then `.env`, else 3000), which reaches the host's localhost on Linux and macOS, so only a differen
  • Network accessline 8
    - **URL**: where it serves. The recorder uses `http://localhost:$PORT` (environment, then `.env`, else 3000), which reaches the host's localhost on Linux and macOS, so only a different host needs `app.url` in `.demos/demo.config.mjs`.

packages/skills-catalog/skills/(web-automation)/demo/scripts/config

  • Executable scriptline 1
    #!/usr/bin/env bash

packages/skills-catalog/skills/(web-automation)/demo/scripts/record

  • Executable scriptline 1
    #!/usr/bin/env bash
  • Network accessline 32
    # app.url falls back to http://localhost:$PORT, from the environment or the project .env.
  • Access to secretsline 33
    [Credential-related source omitted]
  • Access to secretsline 34
    [Credential-related source omitted]

packages/skills-catalog/skills/(web-automation)/playwright-skill/API_REFERENCE.md

  • Network accessline 56
    reporter: 'html',   use: {     baseURL: 'http://localhost:3000',
  • Network accessline 57
    use: {     baseURL: 'http://localhost:3000',     trace: 'on-first-retry',
  • Network accessline 58
    baseURL: 'http://localhost:3000',
  • Network accessline 69
    webServer: {     command: 'npm run start',     url: 'http://localhost:3000',
  • Network accessline 70
    command: 'npm run start',     url: 'http://localhost:3000',     reuseExistingServer: !process.env.CI,
  • Network accessline 71
    url: 'http://localhost:3000',
  • Network accessline 98
    // Navigate   await page.goto('https://example.com', {
  • Network accessline 99
    await page.goto('https://example.com', {
  • Network accessline 308
    // Page assertions await expect(page).toHaveTitle('My App'); await expect(page).toHaveURL('https://example.com/dashboard');
  • Network accessline 309
    await expect(page).toHaveTitle('My App'); await expect(page).toHaveURL('https://example.com/dashboard'); await expect(page).toHaveURL(/.*dashboard/);
  • Network accessline 310
    await expect(page).toHaveURL('https://example.com/dashboard');
  • Network accessline 498
    // Measure page load time const startTime = Date.now(); await page.goto('https://example.com');
  • Network accessline 499
    const startTime = Date.now(); await page.goto('https://example.com'); const loadTime = Date.now() - startTime;
  • Network accessline 500
    await page.goto('https://example.com');
  • Network accessline 642
    # Generate code npx playwright codegen https://example.com
  • Network accessline 643
    npx playwright codegen https://example.com
  • Network accessline 651
    - [Playwright Documentation](https://playwright.dev/docs/intro)
  • Network accessline 652
    - [API Reference](https://playwright.dev/docs/api/class-playwright)
  • Network accessline 653
    - [Best Practices](https://playwright.dev/docs/best-practices)

packages/skills-catalog/skills/(web-automation)/playwright-skill/SKILL.md

  • Network accessline 63
    // Parameterized URL (detected or user-provided) const TARGET_URL = 'http://localhost:3001' // <-- Auto-detected or from user
  • Network accessline 64
    const TARGET_URL = 'http://localhost:3001' // <-- Auto-detected or from user
  • Network accessline 94
    const TARGET_URL = 'http://localhost:3001' // Auto-detected
  • Network accessline 120
    const TARGET_URL = 'http://localhost:3001' // Auto-detected
  • Network accessline 156
    const TARGET_URL = 'http://localhost:3001' // Auto-detected
  • Network accessline 186
    await page.goto('http://localhost:3000')
  • Network accessline 221
    try {     await page.goto('http://localhost:3000', {
  • Network accessline 222
    await page.goto('http://localhost:3000', {
  • Network accessline 247
    const TARGET_URL = 'http://localhost:3001' // Auto-detected
  • Network accessline 288
    const browser = await chromium.launch({ headless: false }); const page = await browser.newPage(); await page.goto('http://localhost:3001');
  • Network accessline 289
    const page = await browser.newPage(); await page.goto('http://localhost:3001'); await page.screenshot({ path: '/tmp/quick-screenshot.png', fullPage: true });
  • Network accessline 290
    await page.goto('http://localhost:3001');
  • Network accessline 422
    [Runs: detectDevServers()] [Output: Found server on port 3001] I found your dev server running on http://localhost:3001
  • Network accessline 424
    I found your dev server running on http://localhost:3001
  • Network accessline 436
    [Output: Found servers on ports 3000 and 3001] I found 2 dev servers. Which one should I test? - http://localhost:3000
  • Network accessline 437
    I found 2 dev servers. Which one should I test? - http://localhost:3000 - http://localhost:3001
  • Network accessline 438
    - http://localhost:3000
  • Network accessline 439
    - http://localhost:3001

packages/skills-catalog/skills/(web-automation)/playwright-skill/lib/helpers.js

  • Executable scriptline 1
    Executable file
  • Network accessline 397
    }, (res) => {           if (res.statusCode < 500) {             detectedServers.push(`http://localhost:${port}`);
  • Network accessline 398
    if (res.statusCode < 500) {             detectedServers.push(`http://localhost:${port}`);             console.log(`  ✅ Found server on port ${port}`);
  • Network accessline 399
    detectedServers.push(`http://localhost:${port}`);

packages/skills-catalog/skills/(web-automation)/playwright-skill/package.json

  • Executable scriptline 1
    Executable file

packages/skills-catalog/skills/(web-automation)/playwright-skill/run.js

  • Executable scriptline 1
    #!/usr/bin/env node

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Some files could not be read; the facts below still hold.

Declared and executed: 1 fact
Signal confidence: 499 facts

and 449 more

Only the first 500 facts are listed.

Works with

  • Native The repository ships a manifest, folder or frontmatter field for this agent.
  • Compatible A standard SKILL.md that this agent can read.
  • Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

Explore alternatives and comparisons

Add this badge to your README

It updates every night and links to this page.

tech-leads-club/agent-skills: #205 on hotskills, 7.1k stars

[![tech-leads-club/agent-skills on hotskills](https://hotskills.dev/badge/tech-leads-club-agent-skills.svg)](https://hotskills.dev/skill/tech-leads-club-agent-skills/)