workers-best-practices
Reviews and authors Cloudflare Workers code against production best practices, ensuring optimal performance and security.
Install this skill
or
87/100
Security score
The workers-best-practices skill was audited on May 26, 2026 and we found 5 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 100
Access to .env file
SourceSKILL.md
| 100 | | `implements` on platform base classes (instead of `extends`) | Legacy — loses `this.ctx`, `this.env`. Applies to DurableObject, WorkerEntrypoint, Workflow | |
medium line 101
Access to .env file
SourceSKILL.md
| 101 | | `env.X` inside platform base class | Should be `this.env.X` in classes extending DurableObject, WorkerEntrypoint, etc. | |
low line 14
External URL reference
SourceSKILL.md
| 14 | | Workers best practices | Fetch `https://developers.cloudflare.com/workers/best-practices/workers-best-practices/` | Canonical rules, patterns, anti-patterns | |
low line 17
External URL reference
SourceSKILL.md
| 17 | | Cloudflare docs | Search tool or `https://developers.cloudflare.com/workers/` | API reference, compatibility dates/flags | |
low line 119
External URL reference
SourceSKILL.md
| 119 | - **Workflows**: see [Rules of Workflows](https://developers.cloudflare.com/workflows/build/rules-of-workflows/) |
Scanned on May 26, 2026
View Security Dashboard