Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

Cloudflare One Zero Trust Design & Troubleshooting

Guides Claude through expert-grade design, configuration, and troubleshooting of Cloudflare One Zero Trust / SASE deployments.

Security & ReviewAdvanced★ 429⑂ 45AI score 8/10Last updated: Sep 22, 2026

What it does

  • Classifies the request as architecture, configuration, troubleshooting, migration, or review, then gathers context (account, users/sites, IdP, SCIM, traffic path, blast radius) before proposing anything.
  • Provides per-product assessment checklists for Access, Gateway, WARP/device client, Tunnel/Mesh, Cloudflare WAN, DLP, CASB, device posture, and identity.
  • Encodes real-world guardrails: split tunnel Include vs Exclude decision table, Gateway order of enforcement, dns.domains vs dns.fqdn, default-deny Access policies, reusable vs legacy app-scoped policies, MDM overriding dashboard settings.
  • Frames every change as prerequisites → change set → validation → rollback, and stages risky policies disabled or scoped to a pilot group.
  • Forbids guessing limits, category IDs, or API bodies — it retrieves current Cloudflare docs/API schema instead.

Who it's for

  • Network and security engineers, SEs, and MSP consultants deploying or operating Cloudflare Zero Trust.
  • Teams replacing VPN with ZTNA or rolling out SWG, TLS inspection, DLP, and CASB in phases.
  • Operators debugging access failures that span Access policies, tunnel routes, and device profiles.

Example uses

  1. "Give remote staff access to internal apps in our VPC without VPN" → on-ramp selection (Tunnel/Mesh/WAN), routes, virtual networks, private DNS, and a phased pilot rollout.
  2. "WARP connects but internal hostnames don't resolve" → checks tunnel health, published routes, resolver policies, and split-tunnel/route alignment in order.
  3. "We want DLP on outbound web traffic" → TLS inspection prerequisites, root CA distribution, Do Not Inspect exceptions, payload logging to tune false positives, then enforcement.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/aiskillstore/marketplace/HEAD/pending/cloudflare/cloudflare-one/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the pending/cloudflare/cloudflare-one folder from the GitHub repo aiskillstore/marketplace into my ~/.claude/skills/cloudflare-one/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/aiskillstore/marketplace.git /tmp/aiskillstore && mkdir -p ~/.claude/skills/cloudflare-one && cp -r /tmp/aiskillstore/pending/cloudflare/cloudflare-one/* ~/.claude/skills/cloudflare-one/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal and clone the repo: git clone https://github.com/aiskillstore/marketplace.git /tmp/aiskillstore
  2. Create the skill directory: mkdir -p ~/.claude/skills/cloudflare-one
  3. Copy the files: cp -r /tmp/aiskillstore/pending/cloudflare/cloudflare-one/* ~/.claude/skills/cloudflare-one/
  4. Confirm that ~/.claude/skills/cloudflare-one/SKILL.md exists.
  5. (Recommended) Connect the Cloudflare docs MCP server to Claude Code so the skill can retrieve current docs and API schemas.
  6. Restart Claude Code and ask something like "Help me design Cloudflare One access for our private apps" — the skill activates automatically.
View source on GitHub ↗