cloudflare-tunnel-publish SKILL.md skillA
cloudflare-tunnel-publish from starchild-ai-agent/official-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add starchild-ai-agent/official-skills/cloudflare-tunnel-publish@v1.3.0Pins v1.3.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- starchild-ai-agent/official-skills
- Path
cloudflare-tunnel-publish/SKILL.md- Versions recorded
- 5
- Latest version
- v1.3.0, committed Jun 26, 2026
- First version recorded
- May 9, 2026
- Size
- 21,406 bytes
- Repository stars
- 32
- License
- none declared
Publish a local service to a user-owned custom domain via Cloudflare Tunnel. Use when the user wants their own domain instead of community.iamstarchild.com (e.g. app.mydomain.com, fix SSL 521 on a custom domain).
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
## What this skill does Turns a service running on a local port (default: a Starchild preview, but works for any HTTP service) into something the world can reach at `app.userdomain.com`, using **Cloudflare Tunnel**. No public IP required, no inbound ports opened, free SSL. **Two roles in the flow:** - **User does manually** (must, can't be automated): create Cloudflare account, buy/transfer domain to Cloudflare, create API Token. - **Agent does automatically** (this skill): verify token, pick zone, create tunnel, configure ingress, create DNS, install + start `cloudflared`, verify the public URL works. ## Audience assumption Treat the user as a **beginner**. They may have never used Cloudflare. Walk them through one micro-step at a time, wait for confirmation, then move on. Do NOT dump the whole 10-step plan and disappear. ## Workflow ### Phase 0 — Set the stage (1 message) Tell the user in plain language what's about to happen, in 4 phases: 1. They register a Cloudflare account + add a domain (manual, ~5 min) 2. They create an API Token and give it to you securely (manual, ~2 min) 3. You build the tunnel + DNS + start it (automatic, ~1 min) …
Read the whole file at its exact version.
How to install
mdr add starchild-ai-agent/official-skills/cloudflare-tunnel-publish@sha256:7777a8245f9b0928The line at the top of this page pins the label v1.3.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_jfqimfeovfxo3ul3)
7 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between May 9, 2026 and Jun 26, 2026, about one every 12 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.3.0 latest | 2026-06-26 | ae45a62 | 21,406 B | A | view · diff |
| v1.2.1 | 2026-06-12 | ff4c665 | 18,459 B | A | view · diff |
| v1.2.0 | 2026-06-04 | 35c718e | 21,383 B | A | view · diff |
| v1.1.1 | 2026-05-21 | 868b4d4 | 17,538 B | A | view · diff |
| v1.1.0 | 2026-05-09 | 75c21a2 | 17,979 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (21406 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
starchild-ai-agent/official-skills · 32 stars · license none declared · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_jfqimfeovfxo3ul3 GET https://markdownregistry.com/api/v1/resolve?ref=starchild-ai-agent/official-skills/cloudflare-tunnel-publish GET https://markdownregistry.com/api/v1/blob/7777a8245f9b0928112da544a1a4d4632bb35f24337cdc5119f7ddbcc48e79d4
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.