Agent skill · security · aradotso
ip-security-analyzer-cloudflare-worker
Deploy and customize a Cloudflare Worker for IP intelligence, VPN/proxy detection, WebRTC leak testing, and security scoring with IPinfo and AbuseIPDB integration
Why this skill is useful
Adds a Cloudflare Worker script for IP intelligence and security scoring that integrates with external APIs, providing new capabilities for IP analysis.
What it needs
Requires wrangler installed locally. Requires abuseipdb, ipinfo account access. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
IP Security Analyzer Cloudflare Worker Skill by ara.so — Security Skills collection Overview IP Security Analyzer is a single-file Cloudflare Worker that provides forensic IP intelligence by combining Cloudflare metadata, IPinfo Lite ASN enrichment, AbuseIPDB reputation data, request header consistency checks, and browser-side WebRTC leak detection. It separates network classification from risk scoring — infrastructure IPs (datacenter, CDN, cloud) are identified but not penalized unless abuse indicators exist. Key capabilities: Public IP detection and network identity analysis ASN and ISP classification (hosting, mobile, residential, VPN/proxy) Abuse reputation scoring via AbuseIPDB Request header consistency checks (automation detection) Browser WebRTC candidate leak testing Transparent risk scoring model (starts at 100, penalized only by evidence) RESTful JSON API and modern HTML dashboard Installation Option 1: Cloudflare Dashboard 1. Open Cloudflare Dashboard → Workers & Pages 2. Click Create Worker 3. Name it (e.g., ip-security-analyzer) 4. Click Edit Code 5. Paste the Worker code from the repository 6. Click Save and Deploy Option 2: Wrangler CLI Setting Up External APIs The Worker functions without external keys but enrichment is recommended: Get API keys: IPinfo Lite: https://ipinfo.io/signup (free tier available) AbuseIPDB: https://www.abuseipdb.com/register (free tier available) Alternatively, add via Cloudflare Dashboard: Core API Endpoints GET /json or /api Returns full server-side IP analysis as JSON. Response structure: POST /report Receives browser WebRTC candidates and returns combined risk analysis. Response includes: GET /health Basic status endpoint. Configuration Manual API Key Fallback If you cannot use Cloudflare secrets, edit the Worker code: ⚠️ Important: Never commit API keys to public repositories. Use environment variables in production. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/ip-security-analyzer-cloudflare-worker