The Agent Skills Directory

Safe Handling of Credentials: The skill explicitly instructs developers to keep private runtime credentials out of public configuration and to use established secret management tools like Workers secrets. It also provides clear guidance on ensuring local secret files are ignored by version control systems like Git to prevent accidental exposure.
Authentication Best Practices: The skill promotes a principle of least privilege for authentication, recommending that users only authenticate when a specific workflow requires account access rather than making login a global prerequisite.
Data Privacy in Feedback: The references/skill-feedback.md file contains robust guidelines for stripping sensitive information, such as API tokens, account IDs, and private code, before submitting any feedback or bug reports to public repositories.
Validation of Remote Resources: The skill encourages verifying the state of local and remote resources before execution and explicitly warns about documenting exactly which resources are simulated versus real when exercising application logic.
Use of Trusted Tools: All recommended tools and commands (e.g., wrangler, cf-cli, gh) are standard, official utilities from the vendor or well-known development ecosystems, and no arbitrary remote scripts are executed.

cloudflare-app-bootstrap