360 Secure SkillHub
360 安全技能中心

cloudflare-drop

核心功能：将非敏感静态站点部署到Cloudflare Workers临时预览环境，生成公开Live URL与私密Claim URL。典型场景：需短期限预览链接、且目标用户明确接受Cloudflare条款时使用。输入为含index.html的静态目录，部署前需获取用户条款同意，生成私密Claim文件；输出公开Live URL，私密Claim URL仅单独交付目标用户。不得部署敏感/大文件，禁止公开Claim URL。

wei840222
wei840222
热度 67.37
最近更新 2026-07-31 22:08:44
分类：开发依赖：代码执行 / 读写文件 / 第三方 API应用场景：API 集成 / 自动化脚本 / DevOps

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add cloudflare-drop
Metadata
name
cloudflare-drop
description
Deploy small, non-sensitive static sites to temporary Cloudflare Workers previews. Use when an intended user explicitly accepts Cloudflare terms and needs a short-lived workers.dev URL with a privately delivered Claim URL.

Cloudflare Drop

Deploy

  1. Show the intended user the Cloudflare Terms and Privacy Policy, then obtain explicit acceptance.
  2. Choose a new private path for the Claim URL; the script creates it as 0600 and refuses to overwrite it.
  3. Run:
node <installed-skill-dir>/scripts/deploy.mjs <static-directory> \
  --accept-terms \
  --claim-url-file <new-private-file>
  1. Return the Live URL. Read the Claim URL from its private file and deliver it only to the intended user.

Boundaries

  • Deploy only regular files with a root index.html; never deploy private files, symlinks, or large media bundles.
  • Do not expose Claim URLs in group chat, browser output, analytics, or logs.
  • Stop before provisioning when consent, input validation, or Claim-file creation fails.

Reference

Read references/cloudflare-api.md before diagnosing an API failure, retrying a fresh deployment, or deciding whether a site exceeds this skill's limits.