cloudflare/security-audit-skill

Health v2 · maintenance only

Flags: no_releases young

Adoption not part of the score

3077 stars · 228 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A coding-agent skill from Cloudflare that turns an LLM coding agent into a security auditor via a six-phase pipeline (recon, hunting, validation, reporting, structured output, independent verification). It produces machine-readable findings.json validated against a JSON schema, with adversarial verification to eliminate false positives.

Use cases

• audit a codebase for exploitable vulnerabilities with an AI agent
• run multi-agent security review on a repository
• generate machine-readable security findings with verified evidence
• reduce false positives in automated vulnerability discovery
• build a vulnerability discovery harness for my repos
• find injection, access control, and business logic bugs in my code
• security audit skill for Claude Code or similar agents

When to choose

• you want an automated, multi-phase security audit driven by a coding agent
• you need independently verified, schema-validated findings rather than raw LLM output
• you want additive audits that skip known issues across repeated runs
• you target web, client-side, LLM-backed, or native/memory-safety codebases

When to avoid

• you need a traditional deterministic SAST/DAST scanner without LLM costs
• you require compliance-certified scanning or guaranteed coverage
• your environment cannot run multiple parallel LLM agents
• you need real-time or CI-gate scanning with low latency

Facets

plugin · maturity active

vulnerability-scanning penetration-testing security agent-framework code-review security developer-tools artificial-intelligence cli cross-platform coding-agent-skill security-audit llm-agents vulnerability-discovery multi-agent-orchestration findings-schema false-positive-reduction ai-agents nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cloudflare/security-audit-skill")