deploying-cloudflare-web-application

This is a permission-probing script that temporarily pushes and runs a GitHub Actions workflow with access to CLOUDFLARE_API_TOKEN, sending it to https://api.cloudflare.com/client/v4 and printing response status codes. It also issues DELETE requests to randomized paths defined in the adjacent permission table, so effects depend on that file and the target API behavior. The temporary branch and run are deleted afterward, but the workflow’s secret access and remote actions are significant operational risks; review the table and workflow policies before running. No credential exfiltration to an unrelated destination or other clear malware behavior is shown in this fragment.