plugins/cloudflare/skills/workers-ai/SKILL.md
Use this skill when the user asks about Cloudflare Workers AI, running AI inference on Cloudflare's edge, using AI models in Workers, or managing Workers AI resources with Pulumi.
npx skillsauth add nsheaps/ai-mktpl cloudflare-workers-aiInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Workers AI lets you run AI models on Cloudflare's GPU-powered edge network. Access open-source models (LLMs, image generation, embeddings, speech-to-text) directly from Workers with zero infrastructure management.
cloudflare.WorkersScript with aiBindingexport default {
async fetch(request: Request, env: Env): Promise<Response> {
const response = await env.AI.run("@cf/meta/llama-3.1-8b-instruct", {
messages: [{ role: "user", content: "What is Cloudflare?" }],
});
return Response.json(response);
},
};
interface Env {
AI: Ai;
}
[ai]
binding = "AI"
| Model | Task | ID |
| ------------------- | ---------------- | ---------------------------------------------- |
| Llama 3.1 8B | Text generation | @cf/meta/llama-3.1-8b-instruct |
| Mistral 7B | Text generation | @cf/mistral/mistral-7b-instruct-v0.2 |
| BAAI BGE | Text embeddings | @cf/baai/bge-base-en-v1.5 |
| Stable Diffusion XL | Image generation | @cf/stabilityai/stable-diffusion-xl-base-1.0 |
| Whisper | Speech-to-text | @cf/openai/whisper |
Workers AI also has a REST API (no Worker needed):
curl "https://api.cloudflare.com/client/v4/accounts/{account_id}/ai/run/@cf/meta/llama-3.1-8b-instruct" \
-H "Authorization: Bearer $CF_API_TOKEN" \
-d '{"messages": [{"role": "user", "content": "Hello"}]}'
// Workers AI is accessed via a binding on a Worker — no separate resource needed
const worker = new cloudflare.WorkersScript("ai-worker", {
accountId,
name: "ai-worker",
content: workerScript,
module: true,
// AI binding is automatic when using the AI API in the Worker
});
| Tier | Neurons/day | Cost | | ---- | ----------- | ------------------------ | | Free | 10,000 | $0 | | Paid | Unlimited | $0.011 per 1,000 neurons |
Neurons are a normalized unit of compute across all models.
tools
Manually reproduce what the github-app plugin's SessionStart hook does to make a GitHub App installation token usable in the current session — materialize the PEM, generate the token, isolate GH_CONFIG_DIR, write the runtime env file, and wire CLAUDE_ENV_FILE so every Bash call sees GH_TOKEN/GITHUB_TOKEN. Use when the hook did not run, the token is missing from the environment, or a shell/teammate needs the token wired up by hand. <example>GH_TOKEN isn't set even though github-app is configured</example> <example>the github-app SessionStart hook didn't run, set up the token manually</example> <example>wire the github app token into CLAUDE_ENV_FILE</example> <example>gh keeps falling back to the wrong account, isolate GH_CONFIG_DIR</example>
tools
Manually configure the GitHub App bot git identity the way the github-app plugin's SessionStart hook does — resolve the app slug and bot user ID, build the <slug>[bot] name and noreply email, set GIT_AUTHOR_*/GIT_COMMITTER_* env vars, and write an isolated GIT_CONFIG_GLOBAL with the gh auth git-credential helper. Use when commits are attributed to the wrong account, "Author identity unknown" appears, or git identity must be set up by hand. <example>my commits are showing up as the handler, not the bot</example> <example>git says Author identity unknown after the github-app hook ran</example> <example>configure the github app bot git identity manually</example> <example>set up the gh credential helper for git push</example>
tools
Manages spec files for requirements capture and validation
tools
# Bash Chaining Alternatives This skill teaches you how to work around the bash command chaining restriction enforced by this plugin. ## Why Chaining is Blocked The `bash-command-rejection` plugin blocks these operators: | Operator | Name | Why Blocked | | -------- | ---------- | ----------------------------------------------------------------------------------- | | `&&` | AND chain | Runs cmd2 only if cmd1 su