Update to Cloudflare Security

{
  "canonical_app_id": null,
  "connector_id": null,
  "created_at": "2026-09-23T05:52:42.405905Z",
  "discoverability": "LISTED",
  "id": "plugins_6ab3634387ec81919729f26fb2a8e67b",
  "is_template": false,
  "is_template_instance": false,
  "is_v2_template": false,
  "name": "cloudflare-security",
  "release": {
    "app_ids": [],
    "app_manifest": null,
    "app_templates": [],
    "description": "Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance.",
    "display_name": "Cloudflare Security",
    "id": "pluginrel_c50405da1480819189a81e1b743bd21e",
    "interface": {
      "brand_color": null,
      "capabilities": [
        "Analyze",
        "Write"
      ],
      "category": "Security",
      "composer_icon_dark_url": null,
      "composer_icon_url": "https://files.openai.com/content?id=file_00000000fb508208ba569cbb9240e24d",
      "default_prompt": "Audit my Cloudflare setup using authorized read-only account data.",
      "default_prompts": [
        "Audit my Cloudflare setup using authorized read-only account data.",
        "Review this Worker and Wrangler configuration for security risks.",
        "Help me prioritize fixes for my Cloudflare-hosted app."
      ],
      "developer_name": "The Doers Firm",
      "logo_url": "https://files.openai.com/content?id=file_00000000912482089bbd10c2749e82bd",
      "logo_url_dark": null,
      "long_description": "Cloudflare Security reviews Cloudflare account configuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security.",
      "plugin_category_id": "security",
      "privacy_policy_url": "https://thedoersfirm.com/privacy",
      "screenshot_urls": [],
      "short_description": "Harden Cloudflare projects",
      "terms_of_service_url": "https://thedoersfirm.com/terms",
      "website_url": "https://thedoersfirm.com/"
    },
    "keywords": [],
    "mcp_servers": [],
    "onboarding_skill_name": null,
    "requires_local_executor": false,
    "skills": [
      {
        "description": "Review Cloudflare account access, API-token scope, Access policies, and service credentials.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "account-identity-hardening",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Review Cloudflare account access, API-token scope, Access policies, and service credentials."
        },
        "name": "account-identity-hardening",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb313b88191b0dc735791da2487"
      },
      {
        "description": "Coordinate an evidence-based security review of Cloudflare accounts, applications, data, and deployment infrastructure.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "cloudflare-security",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Coordinate an evidence-based security review of Cloudflare accounts, applications, data, and deployment infrastructure."
        },
        "name": "cloudflare-security",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb48bf48191b3ba488033f3371d"
      },
      {
        "description": "Review D1 query safety, API exposure, authentication, tenant isolation, and data lifecycle controls.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "d1-data-access-security",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "code",
          "short_description": "Review D1 query safety, API exposure, authentication, tenant isolation, and data lifecycle controls."
        },
        "name": "d1-data-access-security",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb59124819180bf92e726f6deff"
      },
      {
        "description": "Review Cloudflare CI/CD, Git integrations, build credentials, environment separation, dependencies, and release controls.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "deployment-supply-chain",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Review Cloudflare CI/CD, Git integrations, build credentials, environment separation, dependencies, and release controls."
        },
        "name": "deployment-supply-chain",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb30df081918bf19dd6db37fc1e"
      },
      {
        "description": "Review Cloudflare DNS, DNSSEC, TLS, certificates, origin exposure, and tunnel configuration.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "dns-tls-origin-security",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Review Cloudflare DNS, DNSSEC, TLS, certificates, origin exposure, and tunnel configuration."
        },
        "name": "dns-tls-origin-security",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb468a881918640432fa9e6d09e"
      },
      {
        "description": "Review HTTP security headers, CORS, cookies, redirects, and cache isolation for sensitive responses.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "headers-cors-cache-security",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Review HTTP security headers, CORS, cookies, redirects, and cache isolation for sensitive responses."
        },
        "name": "headers-cors-cache-security",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb5735c8191ae0e3027dc388e48"
      },
      {
        "description": "Assess security observability and guide response to Cloudflare account, token, application, or data incidents.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "monitoring-incident-response",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Assess security observability and guide response to Cloudflare account, token, application, or data incidents."
        },
        "name": "monitoring-incident-response",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb2db3481918defbecf859237cd"
      },
      {
        "description": "Detect unsafe secret storage, credential leakage, overprivileged API use, and sensitive-data logging.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "secrets-and-api-leak-prevention",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Detect unsafe secret storage, credential leakage, overprivileged API use, and sensitive-data logging."
        },
        "name": "secrets-and-api-leak-prevention",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb45ac8819192869a574924a118"
      },
      {
        "description": "Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "security-audit",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts."
        },
        "name": "security-audit",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb5de608191b4e45798568e9038"
      },
      {
        "description": "Produce prioritized, evidence-backed security findings, remediation plans, and verification checks.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "findings-remediation",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Produce prioritized, evidence-backed security findings, remediation plans, and verification checks."
        },
        "name": "findings-remediation",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb70098819191526809eb67faa6"
      },
      {
        "description": "Assess R2, KV, Durable Objects, Queues, Vectorize, and other Cloudflare storage or data bindings.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "storage-and-binding-security",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Assess R2, KV, Durable Objects, Queues, Vectorize, and other Cloudflare storage or data bindings."
        },
        "name": "storage-and-binding-security",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb62ac48191936c8f18230f4550"
      },
      {
        "description": "Review Cloudflare WAF, API Shield, bot controls, endpoint exposure, and abuse/rate-limit defenses.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "waf-api-abuse-protection",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Review Cloudflare WAF, API Shield, bot controls, endpoint exposure, and abuse/rate-limit defenses."
        },
        "name": "waf-api-abuse-protection",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb4eec08191b2336499484c5df6"
      },
      {
        "description": "Review Cloudflare Workers and Pages code, bindings, routes, previews, and application security boundaries.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "workers-pages-security",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Review Cloudflare Workers and Pages code, bindings, routes, previews, and application security boundaries."
        },
        "name": "workers-pages-security",
        "plugin_release_skill_id": "pluginrsk_6ad9bbb2e3088191addd32c9e611e931"
      }
    ],
    "version": "0.1.1"
  },
  "scope": "GLOBAL",
  "share_url": "https://chatgpt.com/plugins/plugins_6ab3634387ec81919729f26fb2a8e67b?open_in_app",
  "status": "ENABLED"
}