CodeQL, Semgrep and SARIF static-analysis toolkit from Trail of Bits: taint tracking, fast pattern scans and merged, deduplicated security findings for coding agents.
Cloudflare Email ServiceSkill
Summary
Wire up Cloudflare Email Sending and Email Routing — the send_email binding, the inbound email() handler, and the deliverability setup that keeps mail out of spam.
Features
- Prerequisite gate: domain onboarding, send_email binding, postal-mime
- Documents the REST vs Workers field asymmetry (address/reply_to vs email/replyTo)
- Covers inbound Email Routing via the Workers email() handler
- Deliverability reference for SPF, DKIM, DMARC, bounces and suppressions
Install This Skill
Add this skill to your favorite AI agent in a few steps.
Skill Content
Description
Cloudflare Email Service launched in 2025 and is still moving quickly, which makes it a product agents confidently get wrong from stale training data. This official skill covers both halves — sending transactional mail and routing inbound mail — and leans hard on retrieval, naming the Cloudflare docs, the REST API spec, @cloudflare/workers-types and the Agents SDK repo as the sources of truth it may itself lag behind.
It begins with a prerequisites gate, which is the step that saves the most time. Before any email code is written the agent checks that the domain is onboarded (npx wrangler email sending list, then wrangler email sending enable), that send_email is present in wrangler.jsonc, and that postal-mime is installed when inbound mail is being parsed. From there a task table routes to the right reference: the Workers binding for sending, the REST API for external apps, the email() handler for Email Routing, or the deliverability guide for SPF, DKIM, DMARC, bounces and suppressions.
The strongest section is a common-mistakes table drawn from real integration failures, with the cause and fix for each. Several are API asymmetries no one guesses right: the REST API takes { "address": ... } and reply_to, while the Workers binding takes { "email": ... } and replyTo. Others are runtime traps — message.raw is a single-use stream, so a second read returns empty unless you buffer it first. And some are policy: Email Service is for transactional mail, not newsletters or bulk campaigns, and forwarding only works to verified destination addresses.
Aimed at developers building transactional email or inbound-mail automation on Workers, including email-driven agents via the Agents SDK. Apache-2.0.
Related Skills
Microsoft's official Playwright skill — drives a real browser from the command line using accessibility snapshots and element refs, and plans, generates and heals Playwright tests.
Google's official agent skill for writing production Maps Platform code — grounded in freshly fetched docs, with a demo key path that needs no billing account.
Railway's official agent skill: create projects, provision databases and buckets, deploy, manage variables and domains, and read build failures back — from the CLI, API or MCP server.