Localized reading guide
cloudflare-onePurpose, usage and source
Design, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments. Use cloudflare-one-migrations for migration planning from other vendors.
Source retrieved:
- Source repository
- cloudflare/skills
- SKILL.md
skills/cloudflare-one/SKILL.md- Repository stars
- 3,222
- Repository updated
- 2026-10-31
- Categories
- Cloud
- Last collected
License: Apache-2.0
Workflow excerpts are reading aids, not executable instructions from Codez. No third-party Skill was run to produce this page.
The purpose and workflow passages below are upstream material, organized and translated for reading. They are distinct from the separately labeled Codez editorial analysis.
What this Skill does
Design, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments. Use cloudflare-one-migrations for migration planning from other vendors.
How the upstream workflow works
Workflow
Classify the ask: architecture, configuration, troubleshooting, migration, or review. Gather context: account ID, users/sites/apps, identity provider, SCIM/group sync, device management, traffic path, compliance constraints, and rollout blast radius. Retrieve only the current docs needed for the products involved: Access, Gateway, WARP/device client, Tunnel/Mesh, Cloudflare WAN, DLP, CASB, device posture, or identity. If account access is available, inspect existing resources before proposing or making changes: Access apps/policies/groups/IdPs, Gateway rules/lists/categories, device profiles/posture checks, tunnels/routes, DNS/resolver settings, and locations/sites.
Upstream passage · L10 ↗Cloudflare One
Before citing limits, settings, API fields, category IDs, or exact UI paths, retrieve current information from the Cloudflare One docs, the Cloudflare docs MCP server, or the Cloudflare API schema.
Upstream passage · L6 ↗Assessment Prompts
Use these to avoid jumping straight to configuration. Ask only the prompts relevant to the user's task.
Upstream passage · L18 ↗Requirements and setup
No short requirements passage was selected from this file. This does not mean the Skill has no dependencies. Check the repository setup instructions and referenced files.
Limits and quality checks
Guardrails
Access controls application authorization; Gateway controls traffic inspection/filtering. Use both when the requirement spans identity-aware app access and network/web security. For new Access deployments, create policies through the reusable policy API (/access/policies) and attach them to applications. Do not send inline policies in an application create/update request unless the current API documentation explicitly requires an app-scoped policy.
API Safety
Use fully qualified MCP tool names when MCP tools are available. Never guess category IDs, application IDs, wirefilter fields, or API request bodies. Retrieve the current schema/docs and existing account objects.
Upstream passage · L176 ↗Start with a safe trial
- Check the supported host and the repository installation instructions. Keep the Skill directory and its referenced scripts, assets and documentation together; SKILL.md alone may omit dependencies.
- Give the agent your real input, desired output and acceptance criteria. Invocation syntax and available tools depend on the host; this site does not assume a universal install command.
- Try the source workflow in a disposable project or on a copy. Review operations that change files, remote services or billable resources before allowing them.
- Validate the output against the source quality checks and your own requirements. A successful trigger or a high repository Star count does not establish a correct result.
Read further in the source
- Cloudflare One
- Workflow
- Assessment Prompts
- Architecture and Current State
- Access and SaaS Federation
- Tunnel and Private Networking
- Gateway, TLS, and DLP
- CASB, Device Posture, and Risk
- Cloudflare WAN / Site Connectivity
- Guardrails
- Identity and Access
- Device Client Deployment
- Private Networking
- Gateway, TLS, and DLP
- CASB, Risk, and Operations
- Infrastructure Access
- Logs, Analytics, and DEX
- Cloudflare WAN / Site Connectivity
- Output Defaults
- Validation Prompts
- API Safety
- Skill feedback
Related Skills
Translation and scope
This reading guide selects passages from the pinned upstream SKILL.md. Translation is assisted. It is not a complete manual or a claim of tested compatibility. Read the original and its referenced files before use.
This introduction refers to the pinned version below; current repository activity and collection time are shown separately.
- Pinned source
- Read the original ↗
- Source retrieved
- Source commit
49a31e0b3229ccdffe4944be9c61bc7481d1d432- Source SHA-256
2981cc98ebb9d4188de2e68fa5aa75fb104f2acd38016242c688c9568698b855