cloudflare/security-audit-skill
★ 60,377 stars
Covered in week 2026-W39 · the 2026-09 report
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
What security-audit-skill is
The skill activates automatically when the request matches its trigger (security audit, find vulnerabilities, pen-test the code, etc.). A direct codebase audit or pen-test request uses full audit mode. Security questions and focused vulnerability work use guidance mode unless you request report artifacts. In full audit mode, an unspecified output directory defaults to ~/security-audit-skill/ /run- .
From the repository README · read it on GitHub →