Skills Explorer Add Skills

durable-objects

An agent skill by cloudflare, from cloudflare/skills. Tags: cloudflare, debugging, state-management, storage, workers.

What it does

Build, debug, or review Cloudflare Durable Objects code for persistent state and coordination.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add cloudflare/skills --skill durable-objects

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/cloudflare/skills
cp -r skills/skills/durable-objects ~/.claude/skills/durable-objects

Safety box score

Grade C, moderate risk: 37 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is documentation for building and reviewing Cloudflare Durable Objects apps; it does not ship executable code, but it does point the agent at Cloudflare tooling and account-affecting commands. The main risks are publishing changes with Wrangler, managing secrets in Cloudflare, and forwarding logs or other data over the network.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution1 (low)No bundled scripts or binaries are shipped, but the markdown includes runnable commands like `wrangler dev`, `wrangler deploy`, and `wrangler secret put`.
Network access2 (moderate)It explicitly tells the agent to fetch remote docs from Cloudflare URLs and includes Cloudflare-facing operations such as `wrangler tail` and `wrangler deploy`, which send data over the network.
Filesystem reach1 (low)The skill focuses edits on project files such as `wrangler.jsonc`, `wrangler.toml`, `src/index.ts`, and test files; it does not direct writes outside the workspace.
Secrets & credentials2 (moderate)It documents secret handling with `wrangler secret put API_KEY` and `wrangler secret put DATABASE_URL`, and code access via `env.API_KEY`, which touches account secrets.
Privilege & persistence1 (low)There is no sudo or OS-level privilege use, but it does instruct account-level configuration changes in Wrangler such as secrets and deployment settings.
Instruction hijack surface0 (none)I found no instructions to ignore agent rules, hide behavior, follow untrusted remote instructions, or use hidden prompt text.
Irreversible actions2 (moderate)The included `wrangler deploy` command can publish code to Cloudflare, and the examples also perform external actions like sending messages through Durable Object methods.
Transparency0 (none)All files are plain markdown and readable; there are no binaries, generated blobs, or decoded-at-runtime code.

Before installing

Rated 2026-10-20 by an automated review of 4 files from the skill's repository.

Source

Repository
cloudflare/skills (all skills from this repository)
Path
skills/durable-objects/SKILL.md
Branch
main
Updated
2026-09-20