The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a variety of shell commands to manage the lifecycle of the cloudflared daemon. This includes using setsid and nohup for process group isolation, pkill and kill for cleanup, dig for DNS propagation verification, and ssh for remote client probing.
[PRIVILEGE_ESCALATION]: The documentation for named (production) tunnels provides instructions for installing the tunnel as a system service using sudo (e.g., sudo cloudflared service install). This is a standard procedure for installing system-level background services.
[PERSISTENCE]: The skill contains instructions for setting up cloudflared to run persistently across reboots using systemd on Linux and launchd on macOS. This behavior is intended for stable, production-grade tunnel configurations.
[INDIRECT_PROMPT_INJECTION]: The scripts/unified-proxy.mjs script acts as an ingestion point for external web traffic, creating a potential attack surface for indirect prompt injection. However, the script implements security best practices, such as a directory traversal check to prevent unauthorized file access.

use-cloudflare-tunnel