wrangler
A real boost on standard / older models (+25); today's top models already have this built in.
如果你用的是标准 / 较老的模型，这个技能帮大忙（+25）；用主流强模型的话它已内置、基本用不上。
Skill briefSkill 简述
Cloudflare Workers CLI for deploying, developing, and managing Workers, KV, R2, D1, Vectorize, Hyperdrive, Workers AI, Containers, Queues, Workflows, Pipelines, and Secrets Store. Load before running wrangler commands to ensure correct synt…Cloudflare Workers CLI，用于部署、开发和管理 Workers、KV、R2、D1、Vectorize、Hyperdrive、Workers AI、Containers、Queues、Workflows、Pipelines 和 Secrets Store。运行 wrangler 命令前加载，确保语法和参数正确。
Review findings · 8评测结果 · 8
- Description doesn’t say WHEN to use itdescription 没说清什么时候该用它medium中危A good description names the trigger (e.g. "when reviewing a PR"). Without it the skill mis-fires or never fires.好的 description 会点明触发场景（比如"审查 PR 时"）。少了它，skill 要么乱触发、要么根本不触发。
- Bloated: high token cost内容冗长 · token 成本偏高medium中危~4,589 tokens on every single call. Compress instructions and trim examples.每次调用都要多花约 4,589 个 token。精简指令、删减示例就能省下来。
- Monolithic — should use progressive disclosure细节未分层 · 应按需加载（渐进式披露）medium中危All ~4,589 tokens load on EVERY trigger. Anthropic’s skill guidance is a lean SKILL.md that points to detailed `references/` files loaded on demand — move your 71 detail sections out to cut the per-trigger cost ~89%.每次触发都要加载全部约 4,589 个 token。更省的写法是让 SKILL.md 保持精简、把细节放进按需加载的 `references/` 文件——把这 71 个细节小节挪出去，每次触发的成本能降约 89%。
- References API keys / env config引用 API key / 环境变量配置medium中危Reads an API key or env var — normal for API clients. Ensure keys come from the runtime (not hardcoded); a leak risk only if sent to an untrusted endpoint.读取 API key 或环境变量——对 API 客户端来说很正常。确保 key 来自运行时（别硬编码在文件里）；只有把它发往不可信的地址时才有泄露风险。
- Embedded shell script block内嵌 shell 脚本块medium中危Ships runnable command-line scripts. Not necessarily bad, but must be sandboxed and reviewed.附带了可直接运行的命令行脚本。不一定是坏事，但必须放进沙箱并经过审查。
- Contains curl / wget network command包含 curl / wget 网络命令medium中危Accesses the network from the shell. If the target is untrusted it can pull malware or exfiltrate data.从 shell 直接访问网络。如果目标不可信，可能被用来拉取恶意程序或外传数据。
- Reads credentials and makes network calls — verify the destination既读凭证又发网络请求——请核实目标地址medium中危The normal shape of an API client (your key → the API). Static analysis sees the capability, not the intent — confirm the endpoint is one you trust; it is a data-leak risk only if it is not.API 客户端本来就长这样（你的 key → 对应的 API）。静态分析只看得到"能做什么"，看不到"想干什么"——确认这个地址是你信得过的；只有它不可信时才谈得上泄露风险。
- Repeated content内容重复low低危~7 duplicate lines detected; de-duping is free token savings.检测到约 7 行重复内容；去重就是白捡的 token。
SkillMOO is the independent evaluator: we never modify a third-party author's original work — grading and rewriting the same artifact would compromise the independence this rating stands on. One-click optimize runs only on YOUR copy: paste this skill's SKILL.md into the free detector to get an engine-verified optimize of your copy. Authors: fix the review findings above at the source — we re-grade on every refresh and this page updates automatically.SkillMOO 是评级方：我们从不改动第三方作者的原作 —— 既当裁判又动手改，评级的独立性和公信力就没了。「一键优化」只作用于你自己的副本：把这份 SKILL.md 粘贴到免费检测页，即可获得经引擎逐项校验的一键优化。若你是作者，按上方「评测结果」在源头逐条修复即可 —— 我们会重新评级，本页自动更新。
Optimize my copy →去优化我的副本 →What its scripts can do它的脚本能做什么
| high高危 | Reads secrets读取密钥 |
| medium中危 | Installs packages安装依赖包 |
| medium中危 | Network egress网络外联 |
Grades every skill in your Claude Code / Codex — safety, token bloat, and conflicts. 100% local: nothing is uploaded.给你 Claude Code / Codex 里装的每个 skill 逐个评级 —— 安全、Token 臃肿、冲突。100% 本地完成，不上传任何内容。
npx skillmoo scan
Grade computed 2026-08-03 · rubric skillmoo-static/2.0. Efficacy shown only when measured on a labeled model + task suite — never invented.评级生成于 2026-08-03 · 规则版本 skillmoo-static/2.0。有用分只在标注了模型+任务集的真实测量后才显示 —— 绝不虚构。
One step: paste this line into your README —一步:把下面这行粘进你的 README ——
[](https://skillmoo.com/skill/wrangler/)
Anti-forgery: the badge is rendered live by skillmoo.com, carries this skill’s NAME inside it, and links back to this page — hotlinking someone else’s badge shows the wrong name in plain sight, and one click lands on the real rating. It updates automatically whenever we re-grade.防伪说明:徽章由 skillmoo.com 实时渲染,图内自带本 skill 的名字并链回本页 —— 冒用他人徽章会当场显示对方的名字,读者一点即达真实评级页。我们重新评级时徽章自动同步。