Install
$ agentstack add skill-rahmanef63-si-coder-agent-sc-cf ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
/sc-cf — Cloudflare (STUB)
> Status: boilerplate only. No working scripts yet. Open a PR or implement the TODOs below to fill in.
Scope when implemented
- DNS — create A/CNAME records for `
,api-,site-,dash-. Drop-in replacement forlib/hostinger.js`. - Workers — deploy a worker from
wrangler.toml. - Pages — connect a GitHub repo as a Pages project (alternative to Dokploy for static sites).
- R2 — provision a bucket + access key, write to project env.
- Zero Trust tunnel — optional
cloudflaredtunnel to expose a local service.
Env vars (already registered in scan-env.js)
| Var | Purpose | |---|---| | CLOUDFLARE_API_TOKEN | Token with Zone:Read, Zone:DNS:Edit, Account:Workers:Edit, Account:R2:Edit | | CLOUDFLARE_ACCOUNT_ID | Account ID, copy from the dashboard right sidebar |
Suggested file layout
sc-cf/
├── SKILL.md (this file)
└── scripts/
├── dns.js # CRUD A/AAAA/CNAME via /zones//dns_records
├── deploy-pages.js # POST /accounts/:id/pages/projects + bind to GitHub
├── deploy-worker.js
├── r2-bucket.js # POST /accounts/:id/r2/buckets
└── tunnel.js # cloudflared tunnel create/route
Implementation notes
- API base:
https://api.cloudflare.com/client/v4 - Auth header:
Authorization: Bearer - Errors return
{ success: false, errors: [{code, message}] }— wrap inlib/cloudflare.js(TODO). - Zone ID resolution:
GET /zones?name=returns the zone — cache it. - When
/sc-allcalls a DNS provider, prefersc-cfifCLOUDFLARE_API_TOKENis set, else fall back tolib/hostinger.js.
See lib/hostinger.js for the contract /sc-all expects a DNS module to expose: configureDns({ fullDomain, dokployApiUrl, hostingerToken }).
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: rahmanef63
- Source: rahmanef63/si-coder-agent
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.