Agent skill · security · secondsky
cloudflare-workers-security
Cloudflare Workers security with authentication, CORS, rate limiting, input validation. Use for securing APIs, JWT/API keys, or encountering auth failures, CORS errors, XSS/injection vulnerabilities.
Why this skill is useful
Provides specific security patterns and executable code for validating requests, implementing CORS, and securing APIs that the AI wouldn't reliably generate on its own.
What it needs
About 3k tokens when loaded. Last updated 2026-08-06. 204 stars on the source repository.
What this skill does
Cloudflare Workers Security Comprehensive security patterns for protecting Workers and APIs. Quick Security Checklist Critical Rules 1. Never trust client input - Validate and sanitize everything 2. Use secure secrets - Store in Wrangler secrets, never in code 3. Implement rate limiting - Protect against abuse 4. Set security headers - Prevent common attacks 5. Use CORS properly - Don't use in production Top 10 Security Errors Vulnerability Symptom Prevention --------------- --------- ------------ Missing auth Unauthorized access Verify tokens on every request SQL injection Data breach Use parameterized queries with D1 XSS Script injection Sanitize output, set CSP CORS misconfiguration Blocked requests or open access Configure specific origins Secrets in code Exposed credentials Use wrangler secret Missing rate limits DoS vulnerability Implement per-IP limits Weak tokens Session hijacking Use crypto.subtle for signing Missing HTTPS Data interception Enforce HTTPS redirects Insecure headers Clickjacking, MIME attacks Set security headers Excessive permissions Blast radius Principle of least privilege Authentication Patterns JWT Verification API Key Validation Input Validation With Zod Security Headers CORS Configuration When to Load References Load specific references based on the task: Implementing authentication? → Load references/authentication.md CORS issues? → Load references/cors-security.md Validating input? → Load references/input-validation.md Managing secrets? → Load references/secrets-management.md Rate limiting? → Load references/rate-limiting.md Security headers? → Load references/security-headers.md Templates Template Purpose Use When ---------- --------- ---------- templates/auth-middleware.ts JWT/API key auth Adding authentication templates/cors-handler.ts CORS middleware Handling cross-origin templates/rate-limiter.ts Rate limiting Preventing abuse templates/secure-worker.ts Full secure setup Starting secure project Scripts Script Purpose Command --- …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills secondsky/cloudflare-workers-security