360 Secure SkillHub
360 安全技能中心

cloudflare-drop

该 Skill 通过 Node 脚本将仅含根 index.html 的小型非敏感静态站点部署为临时 Cloudflare Workers 预览,返回 Live URL,并把 Claim URL 写入私有文件后仅交付给目标用户。部署前必须展示 Cloudflare 条款并取得明确同意,且不处理私有文件、符号链接或大型媒体包。

wei840222
wei840222
热度 67.31
最近更新 2026-07-31 22:08:44
分类:开发依赖:代码执行 / 读写文件 / 第三方 API应用场景:DevOps / 自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add cloudflare-drop
Metadata
name
cloudflare-drop
description
Deploy small, non-sensitive static sites to temporary Cloudflare Workers previews. Use when an intended user explicitly accepts Cloudflare terms and needs a short-lived workers.dev URL with a privately delivered Claim URL.

Cloudflare Drop

Deploy

  1. Show the intended user the Cloudflare Terms and Privacy Policy, then obtain explicit acceptance.
  2. Choose a new private path for the Claim URL; the script creates it as 0600 and refuses to overwrite it.
  3. Run:
node <installed-skill-dir>/scripts/deploy.mjs <static-directory> \
  --accept-terms \
  --claim-url-file <new-private-file>
  1. Return the Live URL. Read the Claim URL from its private file and deliver it only to the intended user.

Boundaries

  • Deploy only regular files with a root index.html; never deploy private files, symlinks, or large media bundles.
  • Do not expose Claim URLs in group chat, browser output, analytics, or logs.
  • Stop before provisioning when consent, input validation, or Claim-file creation fails.

Reference

Read references/cloudflare-api.md before diagnosing an API failure, retrying a fresh deployment, or deciding whether a site exceeds this skill's limits.