@olegkoval/agent-skills 1.5.1 → 1.6.0

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-agent-skills",
   "description": "Agent-agnostic skill catalog for Codex, Claude, Cursor, and other skill-aware tools.",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "author": {
     "name": "Oleg Koval"
   },
@@ -23,6 +23,7 @@
     "./packages/software-development/starter-rules",
     "./packages/software-development/open-source-publisher",
     "./packages/marketing/viral-launch",
-    "./packages/marketing/search-console-indexing-audit"
+    "./packages/marketing/search-console-indexing-audit",
+    "./packages/software-development/cloudflare-block-countries"
   ]
 }

package/.cursor-plugin/index.json

@@ -75,6 +75,11 @@
       "name": "olko:search-console-indexing-audit",
       "source": "./packages/marketing/search-console-indexing-audit/adapters/cursor",
       "description": "Analyze Google Search Console Coverage CSV exports and correlate them with sitemap, robots, canonical, redirect, and noindex signals."
+    },
+    {
+      "name": "olko:cloudflare-block-countries",
+      "source": "./packages/software-development/cloudflare-block-countries/adapters/cursor",
+      "description": "Block specific countries via Cloudflare WAF Custom Rules using the Cloudflare API. Handles creating new rulesets and updating existing ones across single or multiple zones."
     }
   ]
 }

package/catalog/skills.json

@@ -306,6 +306,26 @@
         "cursor",
         "copilot"
       ]
+    },
+    {
+      "name": "cloudflare-block-countries",
+      "lookupName": "olko:cloudflare-block-countries",
+      "category": "software-development",
+      "path": "packages/software-development/cloudflare-block-countries",
+      "description": "Block specific countries via Cloudflare WAF Custom Rules using the Cloudflare API. Handles creating new rulesets and updating existing ones across single or multiple zones.",
+      "tags": [
+        "cloudflare",
+        "waf",
+        "security",
+        "geo-blocking",
+        "firewall"
+      ],
+      "adapters": [
+        "codex",
+        "claude",
+        "cursor",
+        "copilot"
+      ]
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@olegkoval/agent-skills",
-  "version": "1.5.1",
+  "version": "1.6.0",
   "private": false,
   "publishConfig": {
     "access": "public"

package/packages/software-development/cloudflare-block-countries/SKILL.md

@@ -0,0 +1,175 @@
+---
+name: cloudflare-block-countries
+description: 'Block specific countries via Cloudflare WAF Custom Rules using the Cloudflare API. Use when user wants to geo-block traffic, block countries in Cloudflare, set up WAF country rules, or mentions blocking regions. Handles both creating new rulesets and updating existing ones.'
+license: MIT
+allowed-tools: Bash
+compatibility: Codex, Claude Code, Cursor, and other Agent Skills compatible tools. Requires curl and jq.
+metadata:
+  author: Oleg Koval
+  tags:
+    - cloudflare
+    - waf
+    - security
+    - geo-blocking
+    - firewall
+---
+
+# Cloudflare Country Block via WAF Custom Rules
+
+Block traffic from specific countries using Cloudflare WAF Custom Rules and the Cloudflare API.
+
+## Prerequisites
+
+- Cloudflare API Token with `Zone:Rulesets:Edit` permission
+- Zone ID for the target domain
+- `curl` and `jq` installed
+
+## Workflow
+
+### 1. Get Zone IDs
+
+```bash
+curl -s -X GET \
+  "https://api.cloudflare.com/client/v4/zones?account.id=YOUR_ACCOUNT_ID&status=active" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" | jq '.result[] | {name: .name, id: .id}'
+```
+
+### 2. Check Existing Custom Firewall Rulesets
+
+```bash
+curl -s -X GET \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" | \
+  jq '.result[] | select(.phase == "http_request_firewall_custom")'
+```
+
+If the output is empty — no existing ruleset. Go to **3a**. If a ruleset exists, note its `id` and go to **3b**.
+
+### 3a. Create NEW Ruleset with Block Rule
+
+```bash
+curl -s -X POST \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" \
+  --data '{
+    "name": "default",
+    "description": "WAF Custom Rules",
+    "kind": "zone",
+    "phase": "http_request_firewall_custom",
+    "rules": [
+      {
+        "action": "block",
+        "description": "Block traffic from sanctioned countries",
+        "enabled": true,
+        "expression": "(ip.src.country in {\"RU\" \"BY\" \"IR\" \"KP\"})"
+      }
+    ]
+  }' | jq '.success'
+```
+
+### 3b. Update EXISTING Ruleset
+
+```bash
+curl -s -X PUT \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets/RULESET_ID" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" \
+  --data '{
+    "description": "WAF Custom Rules",
+    "rules": [
+      {
+        "action": "block",
+        "description": "Block traffic from sanctioned countries",
+        "enabled": true,
+        "expression": "(ip.src.country in {\"RU\" \"BY\" \"IR\" \"KP\"})"
+      }
+    ]
+  }' | jq '.success'
+```
+
+### 4. Verify the Rule is Active
+
+```bash
+curl -s -X GET \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets/RULESET_ID" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" | jq '.result.rules'
+```
+
+## Country Codes Reference
+
+| Code | Country |
+|------|---------|
+| `RU` | Russia |
+| `BY` | Belarus |
+| `IR` | Iran |
+| `KP` | North Korea |
+| `CN` | China |
+| `CU` | Cuba |
+| `SY` | Syria |
+| `VE` | Venezuela |
+
+## WAF Expression Examples
+
+```
+# Block multiple countries
+(ip.src.country in {"RU" "BY" "IR" "KP"})
+
+# Block country + specific ASN
+(ip.src.country eq "RU") or (ip.geoip.asnum eq 12345)
+
+# Block all except allowlisted IPs
+(ip.src.country in {"RU" "BY"}) and not (ip.src in {1.2.3.4/32})
+```
+
+## Multi-Zone Script
+
+To apply the same block rule across multiple zones:
+
+```bash
+#!/usr/bin/env bash
+API_TOKEN="YOUR_API_TOKEN"
+ZONES=("ZONE_ID_1" "ZONE_ID_2" "ZONE_ID_3")
+EXPRESSION='(ip.src.country in {"RU" "BY" "IR" "KP"})'
+
+for ZONE_ID in "${ZONES[@]}"; do
+  EXISTING=$(curl -s -X GET \
+    "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets" \
+    -H "Authorization: Bearer $API_TOKEN" \
+    -H "Content-Type: application/json" | \
+    jq -r '.result[] | select(.phase == "http_request_firewall_custom") | .id')
+
+  if [ -z "$EXISTING" ]; then
+    METHOD="POST"
+    URL="https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets"
+    DATA=$(jq -n --arg expr "$EXPRESSION" '{
+      name: "default", description: "WAF Custom Rules",
+      kind: "zone", phase: "http_request_firewall_custom",
+      rules: [{action: "block", description: "Block sanctioned countries", enabled: true, expression: $expr}]
+    }')
+  else
+    METHOD="PUT"
+    URL="https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets/$EXISTING"
+    DATA=$(jq -n --arg expr "$EXPRESSION" '{
+      description: "WAF Custom Rules",
+      rules: [{action: "block", description: "Block sanctioned countries", enabled: true, expression: $expr}]
+    }')
+  fi
+
+  RESULT=$(curl -s -X "$METHOD" "$URL" \
+    -H "Authorization: Bearer $API_TOKEN" \
+    -H "Content-Type: application/json" \
+    --data "$DATA" | jq '.success')
+
+  echo "Zone $ZONE_ID: $RESULT"
+done
+```
+
+## Notes
+
+- `PUT` on an existing ruleset **replaces all rules** in it. Include all rules in the payload if the ruleset already has other rules.
+- WAF Custom Rules require a Cloudflare plan that supports rulesets (Free includes basic WAF; Pro/Business/Enterprise for full custom rules).
+- Changes are applied globally within seconds; no cache purge needed.

package/packages/software-development/cloudflare-block-countries/adapters/claude/plugin.json

@@ -0,0 +1,5 @@
+{
+  "name": "olko-cloudflare-block-countries",
+  "description": "Block specific countries via Cloudflare WAF Custom Rules using the Cloudflare API. Handles creating new rulesets and updating existing ones across single or multiple zones.",
+  "skills": "./skills"
+}

package/packages/software-development/cloudflare-block-countries/adapters/claude/skills/cloudflare-block-countries/SKILL.md

@@ -0,0 +1,177 @@
+<!-- Generated by scripts/build-adapters.sh. Do not edit directly. -->
+
+---
+name: cloudflare-block-countries
+description: 'Block specific countries via Cloudflare WAF Custom Rules using the Cloudflare API. Use when user wants to geo-block traffic, block countries in Cloudflare, set up WAF country rules, or mentions blocking regions. Handles both creating new rulesets and updating existing ones.'
+license: MIT
+allowed-tools: Bash
+compatibility: Codex, Claude Code, Cursor, and other Agent Skills compatible tools. Requires curl and jq.
+metadata:
+  author: Oleg Koval
+  tags:
+    - cloudflare
+    - waf
+    - security
+    - geo-blocking
+    - firewall
+---
+
+# Cloudflare Country Block via WAF Custom Rules
+
+Block traffic from specific countries using Cloudflare WAF Custom Rules and the Cloudflare API.
+
+## Prerequisites
+
+- Cloudflare API Token with `Zone:Rulesets:Edit` permission
+- Zone ID for the target domain
+- `curl` and `jq` installed
+
+## Workflow
+
+### 1. Get Zone IDs
+
+```bash
+curl -s -X GET \
+  "https://api.cloudflare.com/client/v4/zones?account.id=YOUR_ACCOUNT_ID&status=active" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" | jq '.result[] | {name: .name, id: .id}'
+```
+
+### 2. Check Existing Custom Firewall Rulesets
+
+```bash
+curl -s -X GET \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" | \
+  jq '.result[] | select(.phase == "http_request_firewall_custom")'
+```
+
+If the output is empty — no existing ruleset. Go to **3a**. If a ruleset exists, note its `id` and go to **3b**.
+
+### 3a. Create NEW Ruleset with Block Rule
+
+```bash
+curl -s -X POST \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" \
+  --data '{
+    "name": "default",
+    "description": "WAF Custom Rules",
+    "kind": "zone",
+    "phase": "http_request_firewall_custom",
+    "rules": [
+      {
+        "action": "block",
+        "description": "Block traffic from sanctioned countries",
+        "enabled": true,
+        "expression": "(ip.src.country in {\"RU\" \"BY\" \"IR\" \"KP\"})"
+      }
+    ]
+  }' | jq '.success'
+```
+
+### 3b. Update EXISTING Ruleset
+
+```bash
+curl -s -X PUT \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets/RULESET_ID" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" \
+  --data '{
+    "description": "WAF Custom Rules",
+    "rules": [
+      {
+        "action": "block",
+        "description": "Block traffic from sanctioned countries",
+        "enabled": true,
+        "expression": "(ip.src.country in {\"RU\" \"BY\" \"IR\" \"KP\"})"
+      }
+    ]
+  }' | jq '.success'
+```
+
+### 4. Verify the Rule is Active
+
+```bash
+curl -s -X GET \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets/RULESET_ID" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" | jq '.result.rules'
+```
+
+## Country Codes Reference
+
+| Code | Country |
+|------|---------|
+| `RU` | Russia |
+| `BY` | Belarus |
+| `IR` | Iran |
+| `KP` | North Korea |
+| `CN` | China |
+| `CU` | Cuba |
+| `SY` | Syria |
+| `VE` | Venezuela |
+
+## WAF Expression Examples
+
+```
+# Block multiple countries
+(ip.src.country in {"RU" "BY" "IR" "KP"})
+
+# Block country + specific ASN
+(ip.src.country eq "RU") or (ip.geoip.asnum eq 12345)
+
+# Block all except allowlisted IPs
+(ip.src.country in {"RU" "BY"}) and not (ip.src in {1.2.3.4/32})
+```
+
+## Multi-Zone Script
+
+To apply the same block rule across multiple zones:
+
+```bash
+#!/usr/bin/env bash
+API_TOKEN="YOUR_API_TOKEN"
+ZONES=("ZONE_ID_1" "ZONE_ID_2" "ZONE_ID_3")
+EXPRESSION='(ip.src.country in {"RU" "BY" "IR" "KP"})'
+
+for ZONE_ID in "${ZONES[@]}"; do
+  EXISTING=$(curl -s -X GET \
+    "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets" \
+    -H "Authorization: Bearer $API_TOKEN" \
+    -H "Content-Type: application/json" | \
+    jq -r '.result[] | select(.phase == "http_request_firewall_custom") | .id')
+
+  if [ -z "$EXISTING" ]; then
+    METHOD="POST"
+    URL="https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets"
+    DATA=$(jq -n --arg expr "$EXPRESSION" '{
+      name: "default", description: "WAF Custom Rules",
+      kind: "zone", phase: "http_request_firewall_custom",
+      rules: [{action: "block", description: "Block sanctioned countries", enabled: true, expression: $expr}]
+    }')
+  else
+    METHOD="PUT"
+    URL="https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets/$EXISTING"
+    DATA=$(jq -n --arg expr "$EXPRESSION" '{
+      description: "WAF Custom Rules",
+      rules: [{action: "block", description: "Block sanctioned countries", enabled: true, expression: $expr}]
+    }')
+  fi
+
+  RESULT=$(curl -s -X "$METHOD" "$URL" \
+    -H "Authorization: Bearer $API_TOKEN" \
+    -H "Content-Type: application/json" \
+    --data "$DATA" | jq '.success')
+
+  echo "Zone $ZONE_ID: $RESULT"
+done
+```
+
+## Notes
+
+- `PUT` on an existing ruleset **replaces all rules** in it. Include all rules in the payload if the ruleset already has other rules.
+- WAF Custom Rules require a Cloudflare plan that supports rulesets (Free includes basic WAF; Pro/Business/Enterprise for full custom rules).
+- Changes are applied globally within seconds; no cache purge needed.

package/packages/software-development/cloudflare-block-countries/adapters/codex/README.md

@@ -0,0 +1,3 @@
+# Codex adapter
+
+Use the canonical skill directly from `packages/software-development/cloudflare-block-countries/SKILL.md`.

package/packages/software-development/cloudflare-block-countries/adapters/cursor/plugin.json

@@ -0,0 +1,6 @@
+{
+  "name": "olko:cloudflare-block-countries",
+  "version": "0.1.0",
+  "description": "Block specific countries via Cloudflare WAF Custom Rules using the Cloudflare API. Handles creating new rulesets and updating existing ones across single or multiple zones.",
+  "skills": "skills/"
+}

package/packages/software-development/cloudflare-block-countries/adapters/cursor/skills/cloudflare-block-countries/SKILL.md

@@ -0,0 +1,177 @@
+<!-- Generated by scripts/build-adapters.sh. Do not edit directly. -->
+
+---
+name: cloudflare-block-countries
+description: 'Block specific countries via Cloudflare WAF Custom Rules using the Cloudflare API. Use when user wants to geo-block traffic, block countries in Cloudflare, set up WAF country rules, or mentions blocking regions. Handles both creating new rulesets and updating existing ones.'
+license: MIT
+allowed-tools: Bash
+compatibility: Codex, Claude Code, Cursor, and other Agent Skills compatible tools. Requires curl and jq.
+metadata:
+  author: Oleg Koval
+  tags:
+    - cloudflare
+    - waf
+    - security
+    - geo-blocking
+    - firewall
+---
+
+# Cloudflare Country Block via WAF Custom Rules
+
+Block traffic from specific countries using Cloudflare WAF Custom Rules and the Cloudflare API.
+
+## Prerequisites
+
+- Cloudflare API Token with `Zone:Rulesets:Edit` permission
+- Zone ID for the target domain
+- `curl` and `jq` installed
+
+## Workflow
+
+### 1. Get Zone IDs
+
+```bash
+curl -s -X GET \
+  "https://api.cloudflare.com/client/v4/zones?account.id=YOUR_ACCOUNT_ID&status=active" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" | jq '.result[] | {name: .name, id: .id}'
+```
+
+### 2. Check Existing Custom Firewall Rulesets
+
+```bash
+curl -s -X GET \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" | \
+  jq '.result[] | select(.phase == "http_request_firewall_custom")'
+```
+
+If the output is empty — no existing ruleset. Go to **3a**. If a ruleset exists, note its `id` and go to **3b**.
+
+### 3a. Create NEW Ruleset with Block Rule
+
+```bash
+curl -s -X POST \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" \
+  --data '{
+    "name": "default",
+    "description": "WAF Custom Rules",
+    "kind": "zone",
+    "phase": "http_request_firewall_custom",
+    "rules": [
+      {
+        "action": "block",
+        "description": "Block traffic from sanctioned countries",
+        "enabled": true,
+        "expression": "(ip.src.country in {\"RU\" \"BY\" \"IR\" \"KP\"})"
+      }
+    ]
+  }' | jq '.success'
+```
+
+### 3b. Update EXISTING Ruleset
+
+```bash
+curl -s -X PUT \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets/RULESET_ID" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" \
+  --data '{
+    "description": "WAF Custom Rules",
+    "rules": [
+      {
+        "action": "block",
+        "description": "Block traffic from sanctioned countries",
+        "enabled": true,
+        "expression": "(ip.src.country in {\"RU\" \"BY\" \"IR\" \"KP\"})"
+      }
+    ]
+  }' | jq '.success'
+```
+
+### 4. Verify the Rule is Active
+
+```bash
+curl -s -X GET \
+  "https://api.cloudflare.com/client/v4/zones/YOUR_ZONE_ID/rulesets/RULESET_ID" \
+  -H "Authorization: Bearer YOUR_API_TOKEN" \
+  -H "Content-Type: application/json" | jq '.result.rules'
+```
+
+## Country Codes Reference
+
+| Code | Country |
+|------|---------|
+| `RU` | Russia |
+| `BY` | Belarus |
+| `IR` | Iran |
+| `KP` | North Korea |
+| `CN` | China |
+| `CU` | Cuba |
+| `SY` | Syria |
+| `VE` | Venezuela |
+
+## WAF Expression Examples
+
+```
+# Block multiple countries
+(ip.src.country in {"RU" "BY" "IR" "KP"})
+
+# Block country + specific ASN
+(ip.src.country eq "RU") or (ip.geoip.asnum eq 12345)
+
+# Block all except allowlisted IPs
+(ip.src.country in {"RU" "BY"}) and not (ip.src in {1.2.3.4/32})
+```
+
+## Multi-Zone Script
+
+To apply the same block rule across multiple zones:
+
+```bash
+#!/usr/bin/env bash
+API_TOKEN="YOUR_API_TOKEN"
+ZONES=("ZONE_ID_1" "ZONE_ID_2" "ZONE_ID_3")
+EXPRESSION='(ip.src.country in {"RU" "BY" "IR" "KP"})'
+
+for ZONE_ID in "${ZONES[@]}"; do
+  EXISTING=$(curl -s -X GET \
+    "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets" \
+    -H "Authorization: Bearer $API_TOKEN" \
+    -H "Content-Type: application/json" | \
+    jq -r '.result[] | select(.phase == "http_request_firewall_custom") | .id')
+
+  if [ -z "$EXISTING" ]; then
+    METHOD="POST"
+    URL="https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets"
+    DATA=$(jq -n --arg expr "$EXPRESSION" '{
+      name: "default", description: "WAF Custom Rules",
+      kind: "zone", phase: "http_request_firewall_custom",
+      rules: [{action: "block", description: "Block sanctioned countries", enabled: true, expression: $expr}]
+    }')
+  else
+    METHOD="PUT"
+    URL="https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets/$EXISTING"
+    DATA=$(jq -n --arg expr "$EXPRESSION" '{
+      description: "WAF Custom Rules",
+      rules: [{action: "block", description: "Block sanctioned countries", enabled: true, expression: $expr}]
+    }')
+  fi
+
+  RESULT=$(curl -s -X "$METHOD" "$URL" \
+    -H "Authorization: Bearer $API_TOKEN" \
+    -H "Content-Type: application/json" \
+    --data "$DATA" | jq '.success')
+
+  echo "Zone $ZONE_ID: $RESULT"
+done
+```
+
+## Notes
+
+- `PUT` on an existing ruleset **replaces all rules** in it. Include all rules in the payload if the ruleset already has other rules.
+- WAF Custom Rules require a Cloudflare plan that supports rulesets (Free includes basic WAF; Pro/Business/Enterprise for full custom rules).
+- Changes are applied globally within seconds; no cache purge needed.