← All skills
workers-best-practices
92 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By daishiman/harness-dev (GitHub) · security · 10 stars · scanned at commit 3e1b394
Cloudflare Workersのコードを本番運用品質のベストプラクティスに照らして作成・レビューする。新しいWorkerの実装、Workerコードのレビュー、wrangler.jsoncの設定、streaming・floating promises・global state・secrets・bindings・observabilityなどのanti-pattern確認で使用する。事前学習の記憶よりCloudflare公式ドキュメントからの取得を優先する。
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 1 place.
Sends data to these websites: api.example.com, api.cloudflare.com, my-other-worker.example.com
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 21 places.
Show 17 more
- .agents/skills/workers-best-practices/references/rules.md, line 105
async fetch(request: Request, env: Env): Promise<Response> { - .agents/skills/workers-best-practices/references/rules.md, line 106
const response = await fetch("https://api.example.com/large-dataset"); - .agents/skills/workers-best-practices/references/rules.md, line 113
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - .agents/skills/workers-best-practices/references/rules.md, line 120
const response = await fetch(url); - .agents/skills/workers-best-practices/references/rules.md, line 137
const response = await fetch("https://api.example.com/large-dataset"); - .agents/skills/workers-best-practices/references/rules.md, line 151
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - .agents/skills/workers-best-practices/references/rules.md, line 176
**Check**: no `fetch("https://api.cloudflare.com/client/v4/...")` calls for services available as bindings. - .agents/skills/workers-best-practices/references/rules.md, line 186
const response = await fetch( - .agents/skills/workers-best-practices/references/rules.md, line 203
async fetch(request: Request, env: Env): Promise<Response> { - .agents/skills/workers-best-practices/references/rules.md, line 222
**Check**: Worker-to-Worker calls use `env.SERVICE_NAME.method()` (RPC) or `env.SERVICE_NAME.fetch()`, not `fetch("https://my-other-worker.example.com/...")`. - .agents/skills/workers-best-practices/references/rules.md, line 254
async fetch(request: Request, env: Env): Promise<Response> { - .agents/skills/workers-best-practices/references/rules.md, line 312
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - .agents/skills/workers-best-practices/references/rules.md, line 326
async fetch(request: Request, env: Env): Promise<Response> { - .agents/skills/workers-best-practices/references/rules.md, line 337
**Check**: every `fetch()`, `env.*.put()`, `env.*.send()`, and any other async call is handled. Enable `no-floating-promises` lint rule. - .agents/skills/workers-best-practices/references/rules.md, line 349
const response = await fetch("https://api.example.com/process", { method: "POST", body: JSON.stringify(data) }); - .agents/skills/workers-best-practices/references/rules.md, line 352
ctx.waitUntil(fetch("https://api.example.com/webhook", { method: "POST", body: JSON.stringify(data) })); - .agents/skills/workers-best-practices/references/rules.md, line 358
fetch("https://api.example.com/webhook", { method: "POST", body: JSON.stringify(data) });
and 1 more places
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'workers-best-practices' ] || [ -L ~/.agents/skills/'workers-best-practices' ]; then echo 'A skill folder named workers-best-practices already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/daishiman/harness-dev' "$d" && git -C "$d" checkout --quiet '3e1b394bd699e07d0b030acd44ee12f9143f89eb' -- '.agents/skills/workers-best-practices' && mkdir -p ~/.agents/skills && cp -R "$d"/'.agents/skills/workers-best-practices' ~/.agents/skills/'workers-best-practices' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'workers-best-practices' ~/.claude/skills/'workers-best-practices' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for daishiman/harness-dev shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/daishiman/harness-dev/)
Score history
| Date | Version | Score |
|---|
| 2026-11-12 | 3e1b394 | 92 |
| 2026-11-08 | d629311 | 92 |
| 2026-11-06 | e63e798 | 82 |
Also found in
Identical copies of this skill exist at:
- daishiman/harness-dev/.claude/skills/workers-best-practices
- daishiman/harness-dev/aidd-agent-kit/skills/workers-best-practices