Skip to main content

cloudflare-r2

Provides a comprehensive guide for implementing Cloudflare R2, an S3-compatible object storage solution with zero egress fees.

Install this skill

or
51/100

Security score

The cloudflare-r2 skill was audited on Feb 28, 2026 and we found 21 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 235

Template literal with variable interpolation in command context

SourceSKILL.md
235endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
medium line 41

Access to .env file

SourceSKILL.md
411. `process.env` - Runtime environment variables
medium line 42

Access to .env file

SourceSKILL.md
422. `<project-root>/.env` - Project-level environment file
medium line 43

Access to .env file

SourceSKILL.md
433. `.claude/.env` - Claude configuration directory
medium line 44

Access to .env file

SourceSKILL.md
444. `.claude/skills/.env` - Skills shared configuration
medium line 45

Access to .env file

SourceSKILL.md
455. `.claude/skills/cloudflare-r2/.env` - Skill-specific configuration
medium line 65

Access to .env file

SourceSKILL.md
65**Example .env File:**
low line 67

Access to .env file

SourceSKILL.md
67# See .claude/skills/.env.example for complete configuration
low line 237

Access to .env file

SourceSKILL.md
237accessKeyId: process.env.R2_ACCESS_KEY_ID,
low line 238

Access to .env file

SourceSKILL.md
238secretAccessKey: process.env.R2_SECRET_ACCESS_KEY,
low line 219

External URL reference

SourceSKILL.md
219aws s3api list-buckets --endpoint-url https://<accountid>.r2.cloudflarestorage.com
low line 222

External URL reference

SourceSKILL.md
222aws s3 cp file.txt s3://my-bucket/ --endpoint-url https://<accountid>.r2.cloudflarestorage.com
low line 225

External URL reference

SourceSKILL.md
225aws s3 presign s3://my-bucket/file.txt --endpoint-url https://<accountid>.r2.cloudflarestorage.com --expires-in 3600
low line 235

External URL reference

SourceSKILL.md
235endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
low line 256

External URL reference

SourceSKILL.md
256endpoint_url=f'https://{account_id}.r2.cloudflarestorage.com',
low line 300

External URL reference

SourceSKILL.md
300https://pub-<hash>.r2.dev/file.txt
low line 319

External URL reference

SourceSKILL.md
319"AllowedOrigins": ["https://example.com"],
low line 497

External URL reference

SourceSKILL.md
497- **Documentation:** https://developers.cloudflare.com/r2/
low line 498

External URL reference

SourceSKILL.md
498- **Wrangler Commands:** https://developers.cloudflare.com/r2/reference/wrangler-commands/
low line 499

External URL reference

SourceSKILL.md
499- **S3 Compatibility:** https://developers.cloudflare.com/r2/api/s3/api/
low line 500

External URL reference

SourceSKILL.md
500- **Workers API:** https://developers.cloudflare.com/r2/api/workers/workers-api-reference/
Scanned on Feb 28, 2026
View Security Dashboard