infra-security

What problem does it solve?

This Skill removes the complexity and risk of manually auditing and configuring Cloudflare zones, DNS records, SSL/TLS, and security features so teams can reliably harden domain posture and recover from misconfigurations.

Core Features & Use Cases

• Live Cloudflare management: Authenticate via Cloudflare MCP to list zones, inspect and change DNS, SSL/TLS mode, HSTS, proxy settings, WAF rules, Workers, and Zero Trust policies.
• Robust auditing with fallbacks: Run authenticated MCP API queries when available and fall back to CLI checks (dig, openssl s_client, curl) to verify DNS delegation, certificate chains, and security headers.
• Safe mutating operations: Idempotent DNS CRUD, proxying defaults (orange cloud for web records, grey for mail), explicit user confirmation for any change, and careful handling of sensitive outputs.
• Practical recipes: Includes common wiring flows such as GitHub Pages domain wiring and stepwise certificate provisioning to avoid breaking routing or ACME validation.

Quick Start

Audit example.com for DNS, SSL/TLS, HSTS, WAF configuration and provide a prioritized list of findings and recommended Cloudflare MCP actions.