cloudflare-tunnel
Facilitates exposing local backend APIs to external clients using Cloudflare Tunnel for mobile app testing.
Install this skill
or
38/100
Security score
The cloudflare-tunnel skill was audited on May 21, 2026 and we found 14 security issues across 3 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
medium line 112
Curl to non-GitHub URL
SourceSKILL.md
| 112 | curl https://<subdomain>.<your-domain>/api/health |
high line 3
Ngrok tunnel reference
SourceSKILL.md
| 3 | description: 使用 Cloudflare Tunnel 将本地端口映射到外网固定域名。解决 localtunnel/ngrok/serveo 等方案的验证页面、URL 不稳定等问题。适用于开发阶段将本地后端 API 暴露给移动 APP 测试。 |
high line 21
Ngrok tunnel reference
SourceSKILL.md
| 21 | | **ngrok** | ✅ 无 | 付费版固定 | 有限制 | 备选 | |
medium line 39
Access to hidden dotfiles in home directory
SourceSKILL.md
| 39 | 打开输出的 URL，在浏览器中选择要使用的域名授权。证书会自动下载到 `~/.cloudflared/cert.pem`。 |
medium line 53
Access to hidden dotfiles in home directory
SourceSKILL.md
| 53 | 隧道凭证保存到 `~/.cloudflared/<tunnel-id>.json`，**请勿泄露此文件**。 |
medium line 57
Access to hidden dotfiles in home directory
SourceSKILL.md
| 57 | 创建 `~/.cloudflared/config.yml`： |
medium line 132
Access to hidden dotfiles in home directory
SourceSKILL.md
| 132 | `~/.config/systemd/user/lingxi-tunnel.service`： |
low line 27
External URL reference
SourceSKILL.md
| 27 | 1. **Cloudflare 账号**（免费注册: https://dash.cloudflare.com/sign-up） |
low line 65
External URL reference
SourceSKILL.md
| 65 | service: http://localhost:<port> |
low line 76
External URL reference
SourceSKILL.md
| 76 | service: http://localhost:3001 |
low line 112
External URL reference
SourceSKILL.md
| 112 | curl https://<subdomain>.<your-domain>/api/health |
low line 191
External URL reference
SourceSKILL.md
| 191 | - 文档: https://developers.cloudflare.com/cloudflare-one/ |
low line 216
External URL reference
SourceSKILL.md
| 216 | service: http://localhost:3001 |
low line 218
External URL reference
SourceSKILL.md
| 218 | service: http://localhost:3002 |
Scanned on May 21, 2026
View Security Dashboard