i ideas / repo launcher
cloudflare avatar

cloudflare/security-audit-skill

★ 70,156JavaScriptMIT76

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

What it is

A coding-agent skill that turns your agent into a security auditor. It orchestrates isolated agents through reconnaissance, coverage-led hunting, candidate validation, structured output, independent record verification, and target-neutral reporting. This is the skill that seeded Cloudflare's vulnerability discovery harness, described in Build your own vulnerability harness. The harness grew into a multi-stage, fleet-wide system; this skill is the single-repo starting point it evolved from.

When to use it

Reach for security-audit-skill when you want an AI to write, refactor or scaffold code in your editor or terminal — it's written in JavaScript and fits stacks tagged .

Category
AI Coding Tools
Also in
—
Stars
70,156
Forks
4,650
Last push
2 months ago
Created
2026-06-18
Open issues
123
Website
—

Quick start

$ git clone https://github.com/cloudflare/security-audit-skill.git

Hand it to your AI

Read https://ideas.asveas.com/r/cloudflare/security-audit-skill.md and help me add cloudflare/security-audit-skill to my project. Explain the setup steps for my stack and show the minimal code to get it working.

Alternatives to security-audit-skill

All AI Coding Tools →

Pairs well with

FAQ

What is security-audit-skill?

cloudflare/security-audit-skill is an AI coding tool on GitHub: A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings A coding-agent skill that turns your agent into a security auditor.

When should I use security-audit-skill?

Reach for security-audit-skill when you want an AI to write, refactor or scaffold code in your editor or terminal — it's written in JavaScript and fits stacks tagged .

What are the best alternatives to security-audit-skill?

Popular alternatives in AI Coding Tools: nextlevelbuilder/ui-ux-pro-max-skill (148k★), anomalyco/opencode (226k★), google-gemini/gemini-cli (109k★), pbakaus/impeccable (108k★), OpenHands/OpenHands (93.2k★).

Is security-audit-skill actively maintained?

cloudflare/security-audit-skill looks actively maintained: the last push was 2 months ago (2026-09-14), with 70,156 stars and 123 open issues.

What license does security-audit-skill use?

cloudflare/security-audit-skill is published under the MIT license. Check the repository's LICENSE file before commercial use.