Not in the top 1,000 by GitHub stars
xsser/cliproxyapi-cloudflare-stack
感谢马斯克 让我grok自由，免费注册grok 无数个号。然后cpa自由使用
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6b48c474399c
No earlier version was observed for comparison.
122GitHub stars
0stars in 7 days
1skill in this repository
0commits in 30 days
Heat
0.3- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
How it works
cliproxyapi-cloudflare-stack
When your agent uses it
Deploy a self-hosted, OpenAI-compatible LLM API gateway using CLIProxyAPI (CPA) fronted by Cloudflare — a temp-email Worker (Workers + D1 + Email Routing), credential hot-reload into CPA, and a Cloudflare Tunnel for HTTPS. For learning the Cloudflare + CPA architecture and managing credentials you are authorized to use. Not for automated account creation or bypassing any platform's anti-bot controls.
What it loads into context
Frontmatter
99 tokensAlways available to the agent
SKILL.md
2,198 tokensWhen the skill is activated
Reference documents
464 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Architecture
- Prerequisites
- Phase 1 — Cloudflare mail-receiving Worker
- Phase 2 — CLIProxyAPI on the VM (the gateway)
- Phase 3 — Expose CPA over HTTPS (Cloudflare Tunnel)
- Phase 4 — Ingesting credentials (your responsibility)
- Operational notes (deployment gotchas)
- Verification gate
- License & responsible use
Scripts executed separately
scripts/deploy_vm.shscripts/init_d1_schema.pyscripts/sync_credentials.sh
Files
.gitignoreasset266 bytesREADME.mddoc1,633 bytesSKILL.mdcore8,168 bytesscripts/deploy_vm.shruns1,039 bytesscripts/init_d1_schema.pyruns1,529 bytesscripts/sync_credentials.shruns868 bytestemplates/cloudflared-cpa.service.templateasset681 bytestemplates/config.example.jsonasset1,051 bytestemplates/wrangler.toml.templateasset918 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubSkills included
- cliproxyapi-cloudflare-stack
Repository facts
- License
- No license detected
- Created
- Jul 12, 2026
- Last pushed
- Jul 12, 2026
- Forks
- 10
- Open issues
- 0
- Project activity
- Slowing
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 6, 2026
- No broad tool permissions
- 10 dangerous shell commandsin 3 files: scripts/deploy_vm.sh:3 SKILL.md:49 templates/cloudflared-cpa.service.template:20
- 28 network referencesin 4 files: SKILL.md:38 scripts/init_d1_schema.py:22 scripts/deploy_vm.sh:7 and 1 more
- No hidden or obfuscated text
- No instruction overrides
- 3 executable scriptsin 3 files: scripts/deploy_vm.sh:1 scripts/init_d1_schema.py:1 scripts/sync_credentials.sh:1
- 8 references to secretsin 4 files: templates/config.example.json:2 scripts/init_d1_schema.py:14 scripts/sync_credentials.sh:21 and 1 more
- No requests to vote in Hot
Show all 49 signals by file
SKILL.md
- Network accessline 38
## Phase 1 — Cloudflare mail-receiving Worker 1. Clone [dreamhunter2333/cloudflare_temp_email](https://github.com/dreamhunter2333/cloudflare_temp_email); `cd worker && pnpm install`. - Network accessline 39
1. Clone [dreamhunter2333/cloudflare_temp_email](https://github.com/dreamhunter2333/cloudflare_temp_email); `cd worker && pnpm install`. - Network accessline 40
2. Create D1 `tempmail-db`; record `<d1-database-id>`. If `wrangler d1 create` times out (e.g. behind a 30s-limited runner), use the REST API: `POST https://api.cloudflare.com/client/v4/accounts/<cf-account-id>/d1/database`. 3. Initializ - Network accessline 41
`POST https://api.cloudflare.com/client/v4/accounts/<cf-account-id>/d1/database`. - Network accessline 48
## Phase 2 — CLIProxyAPI on the VM (the gateway) 1. `curl -fsSL https://raw.githubusercontent.com/router-for-me/cliproxyapi-installer/refs/heads/master/cliproxyapi-installer | bash` - Dangerous shell operationline 49
1. `curl -fsSL https://raw.githubusercontent.com/router-for-me/cliproxyapi-installer/refs/heads/master/cliproxyapi-installer | bash` - Network accessline 49
1. `curl -fsSL https://raw.githubusercontent.com/router-for-me/cliproxyapi-installer/refs/heads/master/cliproxyapi-installer | bash` - Network accessline 51
[Credential-related source omitted] - Network accessline 53
[Credential-related source omitted] - Dangerous shell operationline 56
`sudo apt-get install -y python3-pip python3-venv python3-tk libnss3 libnspr4 libatk1.0-0t64 libatk-bridge2.0-0t64 libcups2t64 libxkbcommon0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 libgbm1 libpango-1.0-0 libcairo2 libasound2t64 lib - Network accessline 60
[Credential-related source omitted] - Network accessline 61
[Credential-related source omitted] - Network accessline 62
3. Set ingress: `PUT /accounts/<cf-account-id>/cfd_tunnel/<id>/configurations` with `ingress:[{hostname:"<api-subdomain>.<your-domain>",service:"http://localhost:8317"},{service:"http_status:404"}]`. - Network accessline 74
> This skill does **not** cover how credentials are obtained. Source your credentials > through compliant channels. The upstream [grokRegister-cpa](https://github.com/Git-creat7/grokRegister-cpa) - Network accessline 75
> through compliant channels. The upstream [grokRegister-cpa](https://github.com/Git-creat7/grokRegister-cpa) - Dangerous shell operationline 93
the temp profile dir after each session (`rm -rf "$TMPDIR/DrissionPage/autoPortData"/*`) so
scripts/deploy_vm.sh
- Executable scriptline 1
#!/usr/bin/env bash - Dangerous shell operationline 3
# The CPA gateway itself needs no browser. Run on the VM as a passwordless-sudo user. - Network accessline 7
echo "### base packages" sudo apt-get update -qq sudo apt-get install -y curl ca-certificates jq - Dangerous shell operationline 8
sudo apt-get update -qq - Dangerous shell operationline 9
sudo apt-get install -y curl ca-certificates jq - Network accessline 9
sudo apt-get install -y curl ca-certificates jq - Network accessline 11
echo "### CLIProxyAPI (CPA)" if [ ! -x ~/cliproxyapi/cli-proxy-api ]; then curl -fsSL https://raw.githubusercontent.com/router-for-me/cliproxyapi-installer/refs/heads/master/cliproxyapi-installer | bash - Network accessline 12
if [ ! -x ~/cliproxyapi/cli-proxy-api ]; then curl -fsSL https://raw.githubusercontent.com/router-for-me/cliproxyapi-installer/refs/heads/master/cliproxyapi-installer | bash fi - Dangerous shell operationline 13
curl -fsSL https://raw.githubusercontent.com/router-for-me/cliproxyapi-installer/refs/heads/master/cliproxyapi-installer | bash - Network accessline 13
curl -fsSL https://raw.githubusercontent.com/router-for-me/cliproxyapi-installer/refs/heads/master/cliproxyapi-installer | bash - Dangerous shell operationline 16
sudo loginctl enable-linger "$USER" 2>/dev/null || true
scripts/init_d1_schema.py
- Executable scriptline 1
#!/usr/bin/env python3 - Access to secretsline 14
[Credential-related source omitted] - Access to secretsline 15
[Credential-related source omitted] - Network accessline 22
[Credential-related source omitted] - Network accessline 23
[Credential-related source omitted] - Network accessline 24
req = urllib.request.Request(url, data=json.dumps({"sql": sql}).encode(), headers=headers, method="POST") - Network accessline 25
with urllib.request.urlopen(req, timeout=30) as r: - Network accessline 34
req2 = urllib.request.Request( - Network accessline 36
data=json.dumps({"sql": "SELECT count(*) c FROM sqlite_master WHERE type='table';"}).encode(), headers=headers, method="POST") with urllib.request.urlopen(req2, timeout=30) as r: - Network accessline 37
headers=headers, method="POST") with urllib.request.urlopen(req2, timeout=30) as r: d2 = json.loads(r.read()) - Network accessline 38
with urllib.request.urlopen(req2, timeout=30) as r:
scripts/sync_credentials.sh
templates/cloudflared-cpa.service.template
templates/config.example.json
templates/wrangler.toml.template
- Access to secretsline 13
[Credential-related source omitted]
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Combined signals: 1 fact
- Passes content downloaded from raw.githubusercontent.com to an interpreterscripts/deploy_vm.sh:13High confidence
Signal confidence: 42 facts
- Network access in prose of the SKILL.mdSKILL.md:38Low confidence
- Network access in prose of the SKILL.mdSKILL.md:39Low confidence
- Network access in prose of the SKILL.mdSKILL.md:40Low confidence
- Network access in prose of the SKILL.mdSKILL.md:41Low confidence
- Network access in prose of the SKILL.mdSKILL.md:48Low confidence
- Dangerous shell operation in prose of the SKILL.mdSKILL.md:49Low confidence
- Network access in prose of the SKILL.mdSKILL.md:49Low confidence
- Network access in prose of the SKILL.mdSKILL.md:51Low confidence
- Network access in prose of the SKILL.mdSKILL.md:53Low confidence
- Dangerous shell operation in prose of the SKILL.mdSKILL.md:56Low confidence
- Network access in prose of the SKILL.mdSKILL.md:60Low confidence
- Network access in prose of the SKILL.mdSKILL.md:61Low confidence
- Network access in prose of the SKILL.mdSKILL.md:62Low confidence
- Network access in prose of the SKILL.mdSKILL.md:74Low confidence
- Network access in prose of the SKILL.mdSKILL.md:75Low confidence
- Dangerous shell operation in prose of the SKILL.mdSKILL.md:93Low confidence
- Executable script in code of a file that runsscripts/deploy_vm.sh:1High confidence
- Dangerous shell operation in a comment of a file that runsscripts/deploy_vm.sh:3Low confidence
- Network access in code of a file that runsscripts/deploy_vm.sh:7High confidence
- Dangerous shell operation in code of a file that runsscripts/deploy_vm.sh:8High confidence
- Dangerous shell operation in code of a file that runsscripts/deploy_vm.sh:9High confidence
- Network access in code of a file that runsscripts/deploy_vm.sh:9High confidence
- Network access in code of a file that runsscripts/deploy_vm.sh:11High confidence
- Network access in code of a file that runsscripts/deploy_vm.sh:12High confidence
- Dangerous shell operation in code of a file that runsscripts/deploy_vm.sh:13High confidence
- Network access in code of a file that runsscripts/deploy_vm.sh:13High confidence
- Dangerous shell operation in code of a file that runsscripts/deploy_vm.sh:16High confidence
- Executable script in code of a file that runsscripts/init_d1_schema.py:1High confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuescripts/init_d1_schema.py:14Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuescripts/init_d1_schema.py:15Low confidence
- Network access in code of a file that runsscripts/init_d1_schema.py:22High confidence
- Network access in code of a file that runsscripts/init_d1_schema.py:23High confidence
- Network access in code of a file that runsscripts/init_d1_schema.py:24High confidence
- Network access in code of a file that runsscripts/init_d1_schema.py:25High confidence
- Network access in code of a file that runsscripts/init_d1_schema.py:34High confidence
- Network access in code of a file that runsscripts/init_d1_schema.py:36High confidence
- Network access in code of a file that runsscripts/init_d1_schema.py:37High confidence
- Network access in code of a file that runsscripts/init_d1_schema.py:38High confidence
- Executable script in code of a file that runsscripts/sync_credentials.sh:1High confidence
- Network access in code of a file that runsscripts/sync_credentials.sh:19High confidence
- Network access in code of a file that runsscripts/sync_credentials.sh:21High confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuescripts/sync_credentials.sh:21Low confidence
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Compatible | Standard SKILL.md SKILL.md | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
