cloudflare-security-checker

Validate Cloudflare Workers code for security patterns and secret handling.

3|Updated Oct 22, 2025

Search Tags:#security #secrets #cloudflare #workers #cors

Ready to run

npx skills add https://github.com/hirefrank/claude-plugins --skill cloudflare-security-checker

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cloudflare-security-checker
Source: https://github.com/hirefrank/claude-plugins/tree/main/plugins/edge-stack/skills/cloudflare-security-checker
Command: npx skills add https://github.com/hirefrank/claude-plugins --skill cloudflare-security-checker

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Proactively validates Cloudflare Workers for secure coding practices, secret handling, CORS, and input validation to prevent security regressions.

Core Features & Use Cases

Secret Management: Ensures env usage over hardcoded secrets.
CORS & Headers: Validates proper security headers and origin handling.
Input Validation: Checks for proper request validation patterns.

Quick Start

Run a security scan on Worker code paths to catch hardcoded secrets and insecure patterns.

Frequently Asked Questions about cloudflare-security-checker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect hardcoded secrets in Cloudflare Workers code?▼

Security checks for Cloudflare Workers automatically detect hardcoded secrets by validating that sensitive data uses environment variable references instead of inline values, preventing accidental exposure during deployment.

What security patterns should I enforce in Cloudflare Workers?▼

Enforce secret management via env references, proper CORS headers, robust input validation, D1 prepared statements for database queries, secure authentication patterns, and rate limiting to prevent security regressions in Workers code.

Can I validate CORS and security headers in my Workers automatically?▼

Yes, security validation checks proper CORS configuration and security header setup in Cloudflare Workers during development, catching misconfigurations before deployment.

How do I prevent SQL injection in Cloudflare Workers D1 queries?▼

Security checks enforce D1 prepared statements for all database queries, eliminating SQL injection vulnerabilities by validating parameterized query patterns in Workers code.

What input validation does Cloudflare Workers security checking cover?▼

Security validation detects missing or improper request validation patterns in Workers, ensuring incoming data is sanitized and validated before processing.

When should I run security scans on Cloudflare Workers code?▼

Run security scans during development and before deployment to catch insecure patterns early, validating secret handling, authentication, rate limiting, and data access practices proactively.