cloudflare-troubleshooting

An agent skill by daymade, from daymade/claude-code-skills. Tags: api, cloudflare, dns, security, troubleshooting.

What it does

Investigate and resolve Cloudflare configuration issues using API-driven evidence gathering. Use when troubleshooting ERR_TOO_MANY_REDIRECTS, SSL errors, DNS issues, or any Cloudflare-related problems. Focus on systematic investigation using Cloudflare API to examine actual configuration rather than making assumptions.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add daymade/claude-code-skills --skill cloudflare-troubleshooting

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/daymade/claude-code-skills
cp -r claude-code-skills/cloudflare-troubleshooting ~/.claude/skills/cloudflare-troubleshooting

Safety box score

Grade C, moderate risk: 28 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill diagnoses Cloudflare issues by querying Cloudflare APIs and testing DNS/origin connectivity, and it can also change SSL mode and purge cache. The main risks are live production changes and handing over Cloudflare credentials to commands/scripts that make remote requests.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	1 (low)	It ships runnable Python helpers and shell command workflows, including `scripts/check_cloudflare_config.py` and `scripts/fix_ssl_mode.py`, but there is no arbitrary code evaluation or downloader shelling out.
Network access	2 (moderate)	The skill repeatedly calls `https://api.cloudflare.com/client/v4/...` and also probes external hosts with `dig @8.8.8.8 <domain>` and `curl -I -H "Host: <domain>" https://<origin_ip>`, so diagnostic data leaves the machine.
Filesystem reach	0 (none)	No files outside the project/workdir are read, written, or deleted; there are no dotfile edits or recursive filesystem operations.
Secrets & credentials	2 (moderate)	It requires Cloudflare account email plus Global API Key/API Token, and examples pass secrets directly in CLI arguments such as `python fix_ssl_mode.py ... abc123... full`, which can expose them in history/process listings.
Privilege & persistence	0 (none)	There is no sudo, service registration, global install, or OS/shell configuration change in the skill files.
Instruction hijack surface	0 (none)	The files do not instruct the agent to ignore its rules, follow remote instructions, or hide anything; the content is plain troubleshooting guidance.
Irreversible actions	2 (moderate)	The skill is not read-only: it explicitly performs live changes with `PATCH /zones/{zone_id}/settings/ssl` and `POST /zones/{zone_id}/purge_cache`, though it presents these as user-authorized fixes.
Transparency	0 (none)	All shipped files are plain text and readable; there are no binaries, base64 blobs, or hidden runtime downloads in the skill bundle.

Before installing

Read `scripts/fix_ssl_mode.py` and confirm you’re comfortable with `--apply` and `--purge-cache` changing live Cloudflare state.
Use a scoped API token in a test zone first; avoid pasting a Global API Key into shared shells or chat.
Verify the intended zone/account mapping before running any PATCH/POST request.

Rated 2026-10-16 by an automated review of 7 files from the skill's repository.

Source

Repository: daymade/claude-code-skills (all skills from this repository)
Path: cloudflare-troubleshooting/SKILL.md
Branch: main
Updated: 2026-09-20

X MCP guide — ALWAYS read this when a user connects the X plugin or any X MCP, before using any X connection, and again on any X error.
cloudflare-one — Design, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments.
agents-connect — Use when connecting your agent to external APIs, tools, or services via Gateway, or restricting tool access with Cedar policies.
aws-auth — Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries.
aws-networking — Routes AWS networking requests to the correct service skill for implementation.
aws-secrets-manager — Secret safety for AWS Secrets Manager, secret management, credentials, API keys, tokens, and passwords.