# cloudflare/security-audit-skill

> A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

- GitHub: https://github.com/cloudflare/security-audit-skill
- Category: AI Coding Tools (https://ideas.asveas.com/c/ai-coding)
- Tags: javascript
- Language: JavaScript · License: MIT
- Stars: 70,156 · Forks: 4,650 · Open issues: 123
- Last push: 2026-09-14 (2 months ago)
- Vibe score: 76/100

## What it is
A coding-agent skill that turns your agent into a security auditor. It orchestrates isolated agents through reconnaissance, coverage-led hunting, candidate validation, structured output, independent record verification, and target-neutral reporting. This is the skill that seeded Cloudflare's vulnerability discovery harness, described in Build your own vulnerability harness. The harness grew into a multi-stage, fleet-wide system; this skill is the single-repo starting point it evolved from.

## When to use it
Reach for security-audit-skill when you want an AI to write, refactor or scaffold code in your editor or terminal — it's written in JavaScript and fits stacks tagged .

## Maintenance
cloudflare/security-audit-skill looks actively maintained: the last push was 2 months ago (2026-09-14), with 70,156 stars and 123 open issues.

## Quick start
```bash
git clone https://github.com/cloudflare/security-audit-skill.git
```

## Alternatives in AI Coding Tools
- [nextlevelbuilder/ui-ux-pro-max-skill](https://github.com/nextlevelbuilder/ui-ux-pro-max-skill) — An AI skill that provides design intelligence for building professional UI/UX across multiple platforms. (★148k, Python, vibe 98/100) · details: https://ideas.asveas.com/r/nextlevelbuilder/ui-ux-pro-max-skill
- [anomalyco/opencode](https://github.com/anomalyco/opencode) — The open source coding agent. (★226k, TypeScript, vibe 96/100) · details: https://ideas.asveas.com/r/anomalyco/opencode
- [google-gemini/gemini-cli](https://github.com/google-gemini/gemini-cli) — An open-source AI agent that brings the power of Gemini directly into your terminal. (★109k, TypeScript, vibe 96/100) · details: https://ideas.asveas.com/r/google-gemini/gemini-cli
- [pbakaus/impeccable](https://github.com/pbakaus/impeccable) — The design vocabulary for your coding agent. Steer with polish and bolder, review with critique and audit, catch AI slop before it ships. (★108k, Rust, vibe 96/100) · details: https://ideas.asveas.com/r/pbakaus/impeccable
- [OpenHands/OpenHands](https://github.com/OpenHands/OpenHands) — 🙌 OpenHands: AI-Driven Development (★93.2k, TypeScript, vibe 95/100) · details: https://ideas.asveas.com/r/OpenHands/OpenHands
- [Egonex-AI/Understand-Anything](https://github.com/Egonex-AI/Understand-Anything) — Graphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about. Works with Claude Code, Codex, Cursor, Copilot, Gemini CLI, and more. (★92.1k, TypeScript, vibe 95/100) · details: https://ideas.asveas.com/r/Egonex-AI/Understand-Anything

---
Source: https://ideas.asveas.com/r/cloudflare/security-audit-skill · Catalog: https://ideas.asveas.com/llms.txt