Cloudflare releases open-source agent skills for Zero Trust deployment and migration
Cloudflare released the Cloudflare One stack, an open-source library of agent skills that enable AI agents to plan, deploy, manage, and migrate Zero Trust environments without requiring operators to master the full Cloudflare product suite. The skills ship as two lightweight files: cloudflare-one for product guidance and cloudflare-one-migration for vendor-to-vendor translation, with explicit migration logic for Zscaler and Palo Alto Networks—leveraging the same automation logic used in Cloudflare's Descaler and Deskope programs.
The migration capability is immediately valuable for security teams: ask an agent to migrate Zscaler Private Access applications to Cloudflare Access, and the skill maps application definitions, transforms user groups and policies, creates resources via API, and generates a migration summary showing what succeeded and what needs manual review. The cloudflare-one skill covers the full Zero Trust lifecycle: VPN replacement via Access, user and network security with Gateway, connectivity through Tunnel/Mesh/WAN, troubleshooting with Digital Experience Monitoring, and automated policy recommendations based on live traffic.
When paired with Cloudflare's code-mode MCP server, agents gain a typed API interface to live account configurations, inspections, and curated workflows—keeping credentials out of model context. Cloudflare designed the stack with review-before-apply: agents propose changes and generate summaries for human approval before anything is committed to production. New skills for additional migrations and troubleshooting workflows are in development.
For architects, this signals infrastructure vendors embedding AI-native decision trees and operational patterns into agent-ready SDKs. The stack abstracts away network topology and vendor config nuances, letting generalist agentic platforms (Claude, GPT, Gemini agents) execute security-critical infrastructure decisions. Partner networks benefit from packaged expertise that reduces hours spent on manual migrations, allowing partners to scale consulting margins without adding headcount.
Sources
- Primary source
- blog.cloudflare.com
“Cloudflare recently released the Cloudflare One stack, an open-source library of agent skills that gives AI agents the knowledge to plan, deploy, manage, and migrate Zero Trust environments.”
- startuphub.ai
“The migration capability is also a boon for Cloudflare's partner network, enabling faster deployments and more effective customer management.”
- blog.cloudflare.com
“When paired with the Cloudflare code mode MCP server, the skills gain a typed interface to the Cloudflare API. Agents can query live account configurations, inspect policies, and make changes through curated workflows rather than ad-hoc API calls.”