功能描述

Manage Cloudflare DNS records via API. Use when user asks to list, create, update, or delete DNS records, set up DDNS, manage domains on Cloudflare, or check DNS propagation. Supports A, AAAA, CNAME, TXT, MX, and other record types.

使用说明 (SKILL.md)

Cloudflare DNS

Name: Cloudflare Dns
Author: pushp1997

Manage DNS records via Cloudflare API using the bundled cf-dns.sh script.

Setup

Store credentials in environment or pass via flags:

export CF_API_TOKEN="your-api-token"
export CF_ZONE_ID="your-zone-id"       # optional, can auto-detect from domain

Get API token: Cloudflare Dashboard → My Profile → API Tokens → Create Token → "Edit zone DNS" template.

Get Zone ID: Cloudflare Dashboard → select domain → Overview → right sidebar "Zone ID".

Usage

The script is at scripts/cf-dns.sh. All commands:

# List zones (find zone ID)
cf-dns.sh zones

# List all records for a zone
cf-dns.sh list \x3Czone_id>
cf-dns.sh list --domain example.com

# Get specific record
cf-dns.sh get \x3Czone_id> \x3Crecord_id>

# Create record
cf-dns.sh create \x3Czone_id> --type A --name www --content 1.2.3.4 [--ttl 300] [--proxied]
cf-dns.sh create \x3Czone_id> --type CNAME --name blog --content example.com
cf-dns.sh create \x3Czone_id> --type TXT --name @ --content "v=spf1 ..."
cf-dns.sh create \x3Czone_id> --type MX --name @ --content mail.example.com --priority 10

# Update record
cf-dns.sh update \x3Czone_id> \x3Crecord_id> --content 5.6.7.8 [--ttl 600] [--proxied]

# Delete record
cf-dns.sh delete \x3Czone_id> \x3Crecord_id>

# DDNS: update A record to current public IP
cf-dns.sh ddns \x3Czone_id> --name home
cf-dns.sh ddns --domain example.com --name home

Common Patterns

Add subdomain pointing to IP:

cf-dns.sh create \x3Czone_id> --type A --name subdomain --content 203.0.113.50 --proxied

Set up email (MX + SPF):

cf-dns.sh create \x3Czone_id> --type MX --name @ --content mail.example.com --priority 10
cf-dns.sh create \x3Czone_id> --type TXT --name @ --content "v=spf1 include:_spf.google.com ~all"

Dynamic DNS for home server:

# Run periodically via cron
cf-dns.sh ddns --domain example.com --name home

Notes

--proxied enables Cloudflare proxy (orange cloud) — hides origin IP, adds CDN
TTL in seconds; use 1 for "Auto" when proxied
@ means root domain
Script outputs JSON; pipe to jq for parsing

安全使用建议

This skill's code matches the Cloudflare DNS purpose, but the metadata omits important requirements. Before installing: 1) Confirm the skill author and source (homepage is missing). 2) Expect to provide a CF_API_TOKEN (the script will fail without it); ensure the token has least privilege (use Cloudflare's 'Edit zone DNS' template, not your global API key). 3) Ensure your environment has curl and jq available (script depends on them). 4) Review the bundled scripts locally to verify behavior (they call api.cloudflare.com and public IP services api.ipify.org/ifconfig.me — expected for DDNS). 5) Consider running the skill in a restricted/containerized environment or audit network calls if you must supply real credentials. 6) Ask the publisher to update the registry metadata to declare CF_API_TOKEN as the primary credential and to list required binaries (curl, jq) before you proceed.

功能分析

Type: OpenClaw Skill Name: cloudflare-dns Version: 1.0.0 The skill bundle is a Cloudflare DNS management tool. The `SKILL.md` provides clear, non-malicious instructions for the agent. The `cf-dns.sh` script uses `curl` to interact with the legitimate Cloudflare API and to fetch the public IP from `api.ipify.org` or `ifconfig.me` for Dynamic DNS functionality, which is aligned with its stated purpose. It uses `jq` for safe JSON parsing and construction. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation beyond the skill's intended functionality.

能力评估

ℹ Purpose & Capability

Name/description match the script's behavior: listing, creating, updating, deleting DNS records and DDNS via Cloudflare API. However, the registry metadata lists no required environment variables or primary credential while the script requires CF_API_TOKEN (and optionally CF_ZONE_ID). The primary credential should be declared.

⚠ Instruction Scope

SKILL.md and the script instruct the agent to call Cloudflare API and public IP services (api.ipify.org, ifconfig.me) which is expected. But the script calls external binaries (curl and jq) that are not declared as required in metadata; the script also reads CF_API_TOKEN from the environment though the skill metadata does not declare it. Instructions do not read unrelated files or exfiltrate to unexpected endpoints.

✓ Install Mechanism

No install spec (instruction-only bundle with a script) — nothing is downloaded at install time. The script is bundled in the skill, which is lower-risk than fetching remote install artifacts.

⚠ Credentials

The script legitimately needs CF_API_TOKEN and optionally CF_ZONE_ID. The skill metadata, however, lists no required env vars or primary credential. That omission is disproportionate and could mislead users into installing without providing required tokens or understanding the sensitive credential scope.

✓ Persistence & Privilege

The skill does not request always:true, does not modify other skills or system-wide settings, and has no persistent presence beyond the bundled script. Autonomous invocation is allowed (platform default) but not combined with other high-risk attributes here.

版本历史

v1.0.0

Initial release of cloudflare-dns skill. - Manage Cloudflare DNS records (list, create, update, delete) via bundled cf-dns.sh script. - Supports A, AAAA, CNAME, TXT, MX, and other DNS record types. - Dynamic DNS (DDNS) updates supported. - Credential setup and usage instructions included. - Outputs JSON for easy integration with tools like jq.

元数据

Slug cloudflare-dns

版本 1.0.0

许可证 —

累计安装 3

当前安装数 3

历史版本数 1

常见问题

Cloudflare Dns 是什么？

Manage Cloudflare DNS records via API. Use when user asks to list, create, update, or delete DNS records, set up DDNS, manage domains on Cloudflare, or check DNS propagation. Supports A, AAAA, CNAME, TXT, MX, and other record types. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1082 次。

如何安装 Cloudflare Dns？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install cloudflare-dns」即可一键安装，无需额外配置。

Cloudflare Dns 是免费的吗？

是的，Cloudflare Dns 完全免费（开源免费），可自由下载、安装和使用。

Cloudflare Dns 支持哪些平台？

Cloudflare Dns 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Cloudflare Dns？

由 pushp1997（@pushp1997）开发并维护，当前版本 v1.0.0。

Cloudflare Dns