Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

Cloudflare Zero Trust Skill · automateyournetwork | DecimalAI

devopsby automateyournetwork

Cloudflare Zero Trust Skill

automateyournetwork/cloudflare-zerotrust

Source automateyournetwork/netclaw ↗License Apache-2.0

Inspect Cloudflare Zero Trust access applications, policies, tunnels, and CASB findings.

SkillScore27Maintained

Automatic

Security & AppSec pack

Last verified 8/16/2026

What it changes

Passed 3 of 10 test cases with the skill, and 1 of 10 without it.

Without skill14%

With skill27%

Checks it passed that the model alone missed

Identifies Access:Read as a required scope.
Identifies Account:Read as a required scope.
Declines to create DNS records using Cloudflare Zero Trust tools.

and 1 more in the full report

3 fixed3 passed either way16 still failing0 broke

Pass-rate lift: +14 pp
Tokens: -12%
Agent turns: 0%
Response time: -30%

Model gemini-3.6-flashMeasured 8/16/2026v16 of 22 cases passed with skill · 10 comparable

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/automateyournetwork-cloudflare-zerotrust/SKILL.md https://app.decimal.ai/s/automateyournetwork-cloudflare-zerotrust/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add automateyournetwork-cloudflare-zerotrust, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/automateyournetwork-cloudflare-zerotrust/ and pins it in .decimal/skills.lock

decimalai skills add automateyournetwork-cloudflare-zerotrust

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/automateyournetwork-cloudflare-zerotrust/SKILL.md https://app.decimal.ai/s/automateyournetwork-cloudflare-zerotrust/SKILL.md

Raw file: /s/automateyournetwork-cloudflare-zerotrust/SKILL.md ↗ · machine-readable summary at /s/automateyournetwork-cloudflare-zerotrust.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 3

Prompt

Create a Cloudflare WAF custom firewall rule to block all incoming traffic from IP 192.0.2.45.

What was checked, without and with the skill
Checked	Without skill	With skill
Declines to configure zone WAF rules using Cloudflare Zero Trust tools.	Missed	Passed
Refers user to Cloudflare Zone Rules or WAF configuration tools.	Passed	Passed

case-22 · gemini-3.6-flash · 8/16/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md39 linessingle file

Cloudflare Zero Trust Skill

Inspect Cloudflare Zero Trust access applications, policies, tunnels, and CASB findings.

Tools

Tool	Description
`list_access_applications`	List Zero Trust Access applications
`get_access_application`	Get details for an access application
`list_access_policies`	List access policies for an application
`get_access_policy`	Get details for an access policy
`list_tunnels`	List Cloudflare Tunnels
`get_tunnel`	Get tunnel details and connection status
`list_casb_findings`	List CASB security findings
`get_casb_finding`	Get details for a CASB finding

Example Queries

List all Cloudflare Access applications

Show access policies for the internal-dashboard app

What Cloudflare Tunnels are configured and their status?

List CASB security findings for SaaS misconfigurations

Prerequisites

CLOUDFLARE_API_TOKEN with Access:Read, Account:Read scopes
CLOUDFLARE_ACCOUNT_ID from dashboard

Servers

This skill uses:

cloudflare-casb remote MCP server at casb.mcp.cloudflare.com
cloudflare-audit-logs for access audit trails

Track record

Benchmark

3 / 10

test cases passed, vs 1 / 10 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

automateyournetwork / netclaw

workspace/skills/cloudflare-zerotrust/SKILL.md

View on GitHub ↗

License Apache-2.0Imported 8/3/2026Version v1

Other skills for the same job

Published skills whose descriptions closely match this one, with their headline benchmark lift.

automateyournetwork/cloudflare-securityMonitor Cloudflare WAF, firewall events, audit logs, and threat intelligence.Close match+41 pp pass-rate lift

More skills from the same source and nearby in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

See it in action

What's inside

Cloudflare Zero Trust Skill

Tools

Example Queries

Prerequisites

Servers

Track record

Benchmark

Adoption

SkillSafety

Source

Other skills for the same job

Related skills