CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

cloudflare-one-migrations

Assess and plan migrations from existing VPN, SWG, or SASE platforms to Cloudflare One, including policy mapping, parity gaps, and rollout.

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is cloudflare-one-migrations in cloudflare/skills

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a lean, high-density migration playbook: vendor-specific traps, concrete limits and selectors, safe staging defaults, and validation gates with rollback paths. It scores consistently at or near the top anchors, with only minor room to make error-recovery loops explicit and to split per-vendor detail into reference files.

DimensionReasoningScore

Conciseness

Dense, expert-level guidance with no explanations of concepts Claude already knows; every section adds migration-specific knowledge Claude would not reliably have (e.g., "The default Cloudflare Access application destination limit is 5 hostnames per app", the wirefilter expression, per-vendor trap lists). No trimmable padding, matching the 'every token earns its place' anchor.

5 / 5

Actionability

Concrete, specific instruction throughout — exact export lists per vendor, a copy-paste wirefilter selector (any(access.private_app[*] in {"*"})), explicit precedence and staging rules, and a fill-in assessment template. Minor gap: exact configuration generation is deferred to live docs ("Retrieve current Cloudflare docs ... before generating exact configuration") rather than exemplified, so it sits just below fully copy-paste-ready.

4 / 5

Workflow Clarity

A clear 7-step numbered workflow with safety staging ("use a migration prefix, create disabled/audit-mode rules by default, pilot with small groups/sites") plus an explicit Validation Gates section with stop conditions ("compare Cloudflare object counts against parsed source counts. Stop on mismatches.") and rollback paths. Not 5 because error recovery stops at detection ("Stop on mismatches", "Review every ... item before enabling") without a spelled-out fix-and-revalidate loop.

4 / 5

Progressive Disclosure

A well-organized single-file skill with clear section headers, working Cloudflare doc links, and no nested references. The per-vendor trap sections (ZIA, ZPA, Palo Alto) are detailed enough that they could be split into one-level-deep reference files to keep SKILL.md leaner, which is the minor organization gap between this and the top anchor.

4 / 5

Total

17

/

20

Passed

Description

75%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description communicates a clear, concrete capability set in a well-defined niche, but it lacks any explicit when-to-use trigger clause. Adding a 'Use when...' sentence with vendor names would resolve both the completeness cap and trigger-term gaps.

Suggestions

Add an explicit trigger clause, e.g. "Use when the user wants to migrate from Zscaler ZIA/ZPA, Palo Alto NGFW/Prisma Access, or a legacy VPN/SWG/SASE stack to Cloudflare One."

Include natural vendor names and synonyms (Zscaler, Palo Alto, Prisma, zero trust, ZTNA, WARP) so the description matches how users actually phrase these requests.

DimensionReasoningScore

Specificity

Names the domain and multiple concrete actions — "Assess and plan migrations", "policy mapping", "parity gaps", "rollout" — covering the full assessment-to-rollout lifecycle comprehensively, matching the top anchor rather than the 'minor gaps in coverage' anchor below.

5 / 5

Completeness

Has a clear 'what' (assess and plan migrations including policy mapping, parity gaps, and rollout) but no "Use when..." clause or equivalent explicit trigger guidance, which the judging guidelines cap at 3.

3 / 5

Trigger Term Quality

Includes natural keywords users would say ("VPN", "SWG", "SASE", "Cloudflare One", "migrations"), but common synonyms are missing: vendor names (Zscaler, Palo Alto, Prisma), "zero trust", "ZTNA". Better than the 'some relevant keywords but missing variations' anchor.

4 / 5

Distinctiveness Conflict Risk

Clear niche — migration to Cloudflare One from VPN/SWG/SASE platforms — with distinct triggers and minimal risk of firing for unrelated skills, matching the top anchor.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

freekmurze/dotfiles

Path

config/claude/skills/cloudflare-one-migrations/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.