cloudflare-full-stack-integration
Integrates React frontends with Cloudflare Workers, ensuring seamless authentication and API calls while preventing common integration errors.
Install this skill
Security score
The cloudflare-full-stack-integration skill was audited on Feb 9, 2026 and we found 23 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 322 | await env.DB.prepare(`SELECT * FROM users WHERE id = ${userId}`).run() |
Fetch to external URL
| 79 | fetch('/api/data') |
Fetch to external URL
| 82 | fetch('http://localhost:8787/api/data') |
Fetch to external URL
| 106 | fetch('/api/data') // 401 error! |
Fetch to external URL
| 113 | fetch('/api/data') // Now token is ready |
Access to .env file
| 121 | - Defined in `.env` file |
Access to .env file
| 122 | - Access: `import.meta.env.VITE_VARIABLE_NAME` |
Access to .env file
| 181 | Create `.env` for frontend: |
Access to .env file
| 194 | app.use('/api/*', (c, next) => corsMiddleware(c.env)(c, next)) |
Access to .env file
| 207 | app.use('/api/protected/*', jwtAuthMiddleware(c.env.CLERK_SECRET_KEY)) |
Access to .env file
| 297 | - Must be in `.env` file (not `.dev.vars`) |
Access to .env file
| 298 | - Access: `import.meta.env.VITE_NAME` |
Access to .env file
| 370 | - [ ] `.env` exists for frontend vars |
External URL reference
| 82 | fetch('http://localhost:8787/api/data') |
External URL reference
| 252 | # Both frontend and backend run on http://localhost:5173 |
External URL reference
| 253 | # API routes: http://localhost:5173/api/* |
External URL reference
| 254 | # Frontend: http://localhost:5173/* |
External URL reference
| 389 | - **Cloudflare Vite Plugin**: https://developers.cloudflare.com/workers/vite-plugin/ |
External URL reference
| 390 | - **Hono**: https://hono.dev/ |
External URL reference
| 391 | - **Clerk**: https://clerk.com/docs |
External URL reference
| 392 | - **D1 Database**: https://developers.cloudflare.com/d1/ |
External URL reference
| 393 | - **CORS on Workers**: https://developers.cloudflare.com/workers/examples/cors-header-proxy/ |
External URL reference
| 398 | - WordPress Auditor (https://wordpress-auditor.webfonts.workers.dev) |