cloudflare-workers-bot-scan-defense

Audit Cloudflare Workers routes and configure bot scan defenses.

Updated Apr 22, 2026

Search Tags:#rate limiting #security audit #cloudflare workers #observability #wrangler #hono #bot protection

Ready to run

npx skills add https://github.com/okayus/okayus-skills --skill cloudflare-workers-bot-scan-defense

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cloudflare-workers-bot-scan-defense
Source: https://github.com/okayus/okayus-skills/tree/main/skills/cloudflare-workers-bot-scan-defense
Command: npx skills add https://github.com/okayus/okayus-skills --skill cloudflare-workers-bot-scan-defense

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps Cloudflare Workers applications defend against automated bot scans that appear after HTTPS exposure, preventing unnecessary compute costs and improving visibility into malicious probing.

Core Features & Use Cases

Bot Scan Analysis: Explains the Certificate Transparency Log to scanner pipeline and identifies which paths actually create Worker, CPU, or database costs.
Production Hardening: Guides setup of Workers Observability, rate limiting bindings, Hono middleware, and verification workflows for unauthenticated expensive routes.
Use Case: When launching a new Cloudflare Worker with authentication or paid resources, use this Skill to audit exposed routes, add targeted protections, and verify the deployed defense configuration.

Quick Start

Use the cloudflare-workers-bot-scan-defense skill to audit my Worker deployment and recommend the minimum bot protection changes needed.

Frequently Asked Questions about cloudflare-workers-bot-scan-defense

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

Why does my Cloudflare Worker receive automated bot scans after HTTPS exposure?▼

Automated bot scans target Cloudflare Worker deployments after HTTPS exposure because the Certificate Transparency Log publicly exposes newly registered domains, triggering scanners to probe unauthenticated expensive routes. This Skill analyzes the scanner pipeline and identifies which paths create compute costs.

How do I add rate limiting to a Hono application on Cloudflare Workers?▼

To add rate limiting to a Hono application on Cloudflare Workers, this Skill guides you through configuring rate limit bindings, integrating Hono middleware, and establishing verification workflows to protect unauthenticated expensive routes from automated probing.

Can I use this to audit my Cloudflare Worker routes for unauthenticated expensive paths?▼

Yes, you can use this Skill to audit exposed Cloudflare Worker routes for unauthenticated expensive paths. It analyzes deployments using Wrangler, Hono, D1, and R2 to identify which public HTTPS endpoints lack authentication and consume high compute resources.

What is the best way to configure Workers Observability for bot protection?▼

The best way to configure Workers Observability for bot protection is to integrate it with rate limit bindings and route analysis. This Skill provides a deployment verification workflow to ensure your observability setup correctly tracks and mitigates malicious probing.

Do I need Workers Observability enabled to defend against bot scans?▼

Yes, Workers Observability is required to effectively defend against bot scans. This Skill requires Workers Observability configuration alongside rate limit bindings and middleware integration to audit exposed routes, add targeted protections, and verify the deployed defense configuration.