cloudflare-access-setup
Configures Cloudflare Access with Google OAuth for secure authentication and service protection.
Install this skill
Security score
The cloudflare-access-setup skill was audited on Feb 9, 2026 and we found 23 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 178 | curl -I https://webhook.temet.ai/hooks/health |
Webhook reference - potential data exfiltration
| 143 | 5. Create bypass policy for webhook |
Webhook reference - potential data exfiltration
| 154 | - webhook.temet.ai (no auth for GitHub) |
Webhook reference - potential data exfiltration
| 176 | **CLI Test (webhook bypass):** |
Webhook reference - potential data exfiltration
| 178 | curl -I https://webhook.temet.ai/hooks/health |
Webhook reference - potential data exfiltration
| 216 | - Bypass policy configured for webhook |
Webhook reference - potential data exfiltration
| 268 | - [ ] Do not delete webhook bypass policy (breaks GitHub deployments) |
Access to .env file
| 9 | login remotely". Works with cf-access-setup.sh, .env OAuth credentials, and Cloudflare |
Access to .env file
| 30 | # 2. If OAuth credentials missing, configure .env first (see Section 3.2) |
Access to .env file
| 78 | 1. **Verifies Prerequisites** - Checks OAuth credentials exist in .env |
Access to .env file
| 93 | cd /home/dawiddutoit/projects/network && source .env && echo "Checking OAuth credentials..." |
Access to .env file
| 123 | **Step 4: Update .env** |
Access to .env file
| 225 | - "Missing GOOGLE_OAUTH_CLIENT_ID" -> Configure .env first |
Access to .env file
| 246 | **Environment Variables (in .env):** |
Access to .env file
| 261 | - Read (for checking .env and script output) |
External URL reference
| 36 | After setup, test by visiting https://pihole.temet.ai - you should see Google login. |
External URL reference
| 107 | - URL: https://console.cloud.google.com/apis/credentials |
External URL reference
| 120 | - Authorized redirect URI: `https://temetai.cloudflareaccess.com/cdn-cgi/access/callback` |
External URL reference
| 170 | 2. Navigate to: https://pihole.temet.ai |
External URL reference
| 178 | curl -I https://webhook.temet.ai/hooks/health |
External URL reference
| 189 | https://one.dash.cloudflare.com -> Logs -> Access |
External URL reference
| 199 | echo "Access Logs: https://one.dash.cloudflare.com" |
External URL reference
| 277 | - OAuth redirect URI must be exactly: `https://temetai.cloudflareaccess.com/cdn-cgi/access/callback` |