An agent skill (a SKILL.md) for turning plans, reviews, and research into polished web pages that you publish to your own Cloudflare Pages site, then comment on so your agent can act on the comments. Sharing is per page and optional. It works with Claude Code, Codex, and other agents that read SKILL.md skills.
Overview
agent-artifacts is an agent skill that turns plans, reviews, and research into web pages you publish to your own Cloudflare Pages site. You ask your agent for a page; it writes the content and the skill builds a self-contained page for people plus a Markdown twin for agents.
You can comment on any paragraph, card, task, or chart row, and Copy feedback names each block's stable anchor so the agent edits the right line of the page source. Threads can also be saved on the site, so agents can list the actionable ones, edit the page, reply, resolve, and republish.
The site is private by default, behind one Cloudflare Access login. You can open a single page to named people, or to anyone with a secret link, and revoke it within about a minute. Version 0.2.1 was released in October 2026 under the MIT license, and it runs on the Cloudflare free tier.
Features
Pages for people and agents
- The agent writes artifact.json; the skill builds a self-contained page and a Markdown twin
- Charts, notes, project hubs, a searchable index, and llms.txt are included
- Your artifacts root is a folder, ideally a git repo, and the site is generated from it on every publish
Feedback and comments
- Comment on any paragraph, card, task, or chart row
- Copy feedback names each block's stable anchor so the agent edits the right line
- Optional comment threads saved in Cloudflare D1; agents list the actionable ones, edit, reply, resolve, and republish
- Guests you share a page with can comment too, and their text is fenced as untrusted until you approve it
Private by default, sharing per page
- The site sits behind one Cloudflare Access login
- Open a single page to named people (sign in with an email code, or Google if set up) or to anyone with a secret link
- Turning a link off takes effect within about a minute
- Notes, project hubs, and the index page are never shared; guest lists and link codes live only in Cloudflare, never in git
Safety rails
- Nothing is published unless you ask, and creating a Pages project always needs your explicit OK
- Publish ships a snapshot of the last commit, so another session's half-finished edit cannot ship by accident
- Validators refuse pages that do not match their source, load outside resources, or contain obvious secrets
- Every publish audits the Access rules first and refuses to upload if one is unexpected
Technical Details
Setup
Install with npx skills add Neilsmahajan/agent-artifacts, or clone it into your agent's skills folder, then ask your agent to follow SETUP.md. Requirements are Node 22 or later, git, and a Cloudflare account; wrangler runs through npx. Pages, Access (Zero Trust Free), KV, and D1 fit in the free tier.
Security
Sharing and comments open parts of a private site to other people, so the repository includes a THREAT-MODEL.md to read before turning them on. Comment text only ever reaches the page as text, and each page's content security policy lets its script reach only that page's own comments endpoint.