Directory / Agent skill / Cloudflare security-audit skill
Cloudflare security-audit skill
A coding-agent skill that turns your agent into a security auditor, orchestrating isolated agents through reconnaissance, coverage-led hunting, candidate validation, independent verification and reporting. It seeded Cloudflare's own vulnerability discovery harness.
💲 Open source (MIT); runs on your existing coding agent, so model usage is billed by that agent. Source: github.com (checked Oct 25, 2026).
Pros & cons
👍 Pros
- Fresh verifier agents try to disprove every finding, cutting false positives
- Machine-readable findings validated against a JSON schema
- Covers web, auth, LLM/prompt injection, supply chain, cloud and native targets
👎 Cons
- Multi-agent audits can burn a lot of model tokens
- Findings still need human review before acting on them
Latest release
Trending on GitHub
Gained 2,200+ stars in a day on GitHub trending; it is the single-repo starting point for the harness described in Cloudflare's 'Build your own vulnerability harness' post. Source ↗
Ranked in
Alternatives to Cloudflare security-audit skill
Claude Code
Coding agentAnthropic's agentic coding tool — understands your codebase, edits files, runs commands, and helps you ship faster.
Cursor
AI code editorAn AI coding agent for building ambitious software — agents turn ideas into code so you can hand off tasks.
AI SDK (Vercel)
Agent frameworkA unified TypeScript SDK for building AI apps with modern streaming, fallbacks, and multi-model support.
Ratings are preliminary editorial opinions. Spotted something out of date? Tell us. Listed here? Get the badge. Some links are affiliate links; they never affect rankings.