cloudflare-workers-auth
JWT validation and presigned URL security for Cloudflare Workers with Supabase.
Skill by wildbitca
Chalk Labs
Need help deploying cloudflare-workers-auth?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/wildbitca-cloudflare-workers-auth
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: cloud, security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/cloudflare-workers-auth
What's inside
- Skill name
cloudflare-workers-auth- Description
- JWT validation and presigned URL security for Cloudflare Workers with Supabase. Use when implementing protected endpoints or upload flows in Workers.
- License
- Apache-2.0
- Instructions
- 21 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
# Cloudflare Workers Security ## JWT Validation - **REQUIRED:** All requests to protected backend endpoints must include JWT in `Authorization` header. - **REQUIRED:** Worker must verify token authenticity before processing business logic. - **REQUIRED:** Use `jose` library for local signature verification using asymmetric keys (JWKS from Supabase). - **PROHIBITED:** Calling Supabase API for each token validation (causes unnecessary latency). - **BENEFIT:** Fast, secure edge validation without extra API calls. ## Presigned URLs - **REQUIRED:** Presigned URLs must have 5–10 minute expiration (`PRESIGNED_URL_EXPIRY_SECONDS = 600`). - **REQUIRED:** Validate JWT before generating presigned URLs; only authorized users can upload to their folders. ## Security - **REQUIRED:** Edge validation—validate all write operations in Worker before database. - **REQUIRED:** RLS policies on Supabase for additional defense in depth.
From wildbitca/ai-resources, Apache-2.0.
More from wildbitca/ai-resources
- 0.592score
code-cleanup
wildbitca
Applies generic code cleanup (comments, unused code, empty dirs, linters, config, duplicates) for any language (Dart, Bash, Python, Java, Kotlin, Swift…
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
common-debugging
wildbitca
Systematic troubleshooting using the Scientific Method.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
common-documentation
wildbitca
Essential rules for code comments, READMEs, and technical docs.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
changelog-best-practices
wildbitca
Write, maintain, and migrate CHANGELOG.md files using Keep a Changelog format and best practices.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
common-feedback-reporter
wildbitca
Pre-write skill violation audit.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
common-git-collaboration
wildbitca
Universal standards for version control, branching, and team collaboration.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
common-llm-security
wildbitca
OWASP LLM Top 10 (2025) audit checklist for AI applications, agent tools, RAG pipelines, and prompt construction.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
common-api-design
wildbitca
REST API conventions — HTTP semantics, status codes, versioning, pagination, and OpenAPI standards applicable to any framework.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
common-code-review
wildbitca
Standards for high-quality, persona-driven code reviews.
SkillAFreshness: A★ 1Claude Code +9 - 0.589score
common-mobile-ux-core
wildbitca
Universal mobile UX principles for touch-first interfaces.
SkillAFreshness: A★ 1Claude Code +9 - 0.589score
common-accessibility
wildbitca
WCAG 2.2, ARIA, semantic HTML, keyboard navigation, and color contrast standards for web UIs.
SkillAFreshness: A★ 1Claude Code +9 - 0.589score
common-architecture-audit
wildbitca
Protocol for auditing structural debt, logic leakage, and fragmentation across Web, Mobile, and Backend.
SkillAFreshness: A★ 1Claude Code +9
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 1
- Last commit (this folder)
- Apr 2, 2026 (7 months ago)
- Last release
- Oct 24, 2026 (6 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- Repository
- github.com/wildbitca/ai-resources
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from wildbitca
- 0.592score
common-code-review
wildbitca
Standards for high-quality, persona-driven code reviews.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
common-debugging
wildbitca
Systematic troubleshooting using the Scientific Method.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
changelog-best-practices
wildbitca
Write, maintain, and migrate CHANGELOG.md files using Keep a Changelog format and best practices.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
common-api-design
wildbitca
REST API conventions — HTTP semantics, status codes, versioning, pagination, and OpenAPI standards applicable to any framework.
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
code-cleanup
wildbitca
Applies generic code cleanup (comments, unused code, empty dirs, linters, config, duplicates) for any language (Dart, Bash, Python, Java, Kotlin, Swift…
SkillAFreshness: A★ 1Claude Code +9 - 0.592score
common-documentation
wildbitca
Essential rules for code comments, READMEs, and technical docs.
SkillAFreshness: A★ 1Claude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get cloudflare-workers-auth running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
cloudflare-workers-auth skill. Agent Mart. https://agentmart.dev/skills/wildbitca-cloudflare-workers-auth (last updated 2026-10-24)