A security review assistant for Cloudflare applications. It helps assess tenant and row-level authorization across Workers, D1, PostgreSQL via Hyperdrive, object and key-value storage, caches, identity boundaries, bindings, and background jobs. It distinguishes D1 application-layer authorization from PostgreSQL native RLS, asks for evidence when needed, and provides prioritized findings and negative tests. It cannot guarantee complete security, inspect an account unless connected evidence is supplied, or deploy changes on its own.
Install
- 1Add it in ChatGPT
Open Plugins in the ChatGPT sidebar (web or desktop), search for “Cloudflare RLS” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.
Skills 4
- chat-router
Route Cloudflare application security requests to the right data isolation review workflow.
- cloudflare-security-boundaries
Assess tenant isolation across Cloudflare identity, storage, caching, and asynchronous execution boundaries.
- d1-workers-isolation
Review tenant and row authorization in Cloudflare Workers and D1 applications.
- postgres-rls-hyperdrive
Design and review PostgreSQL row-level security policies used through Cloudflare Hyperdrive.
Things to ask
- “Review this Cloudflare Worker and D1 code for cross-tenant data access risks.”
- “Help me design PostgreSQL RLS policies for a database accessed through Hyperdrive.”
- “Create a security checklist for my Cloudflare app's storage and cache paths.”
Related
SuperpowersPlan, develop, and debug codeplugin · by Jesse Vincent · 294k stars
ShopifyBuild and manage your storeplugin · by Shopify · 7.2k stars