Security Audit
This is a structured methodology for finding exploitable vulnerabilities in codebases. It runs through six phases: reconnaissance to map attack surfaces, parallel hunting across different vulnerability classes (injection, auth bypass, memory safety, business logic), adversarial validation of findings, and structured reporting. The approach is opinionated: it only counts bugs you can actually exploit, pushes you to confirm findings dynamically when possible, and explicitly filters out defense-in-depth theater. It writes outputs to a timestamped directory and reads prior runs to avoid duplicate work, which matters because testing apparently shows a single run only catches about half the issues. Best suited for serious security review where you want methodical coverage, not a quick scan.
- install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.
- 46
- skills.sh installs
- 95.6K
- GitHub stars
- 68.2K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add cloudflare/security-audit-skill --skill security-audit --agent claude-codeInstalls into .claude/skills of the current project.
Files
Security Audit
Find vulnerabilities that violate a real trust boundary, then give owners the source evidence, safe reproduction, priority, and smallest effective fix. This is a defensive, source-first workflow. A candidate without a concrete affected principal, resource, or security outcome is not a confirmed finding.
Operating modes
This skill is guidance by default. Loading it does not authorize the complete audit workflow or file creation.
- Guidance mode: For security questions, focused reviews, methodology, triage, or investigation of specific findings, use only the relevant parts of this skill. Do not automatically run all six phases, create an output directory, or write audit artifacts. You may launch focused agents when useful; they return results to the current task.
- Full audit mode: Use the complete workflow when the user explicitly asks to audit or pen-test a codebase, asks for a full, comprehensive, or end-to-end security review, or requests report artifacts. Run all six phases and write the files defined below.
If the request could mean either mode, ask one focused question before creating files or starting the complete workflow.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/cloudflare/security-audit-skill
- Categories
- Testing & QA, Security, Git & Pull Requests, Code Review & Quality, Cloud & Infrastructure, CLI & Terminal
- First seen
- Jul 14, 2026
Recommended
More Testing & QA
expo-dev-clientexpo/skillsFramework (OSS). Build and distribute Expo development clients locally or via TestFlight for internal testing. For production TestFlight releases and store subm74.6Kskills.sh installs
momentic-result-classificationmomentic-ai/skillsClassify or explain Momentic test run results using Momentic MCP tools. Use when the user asks to categorize a failure, understand why a run failed, triage test68.5Kskills.sh installs
ci-cd-and-automationaddyosmani/agent-skillsAutomates CI/CD pipeline setup. Use when setting up or modifying build and deployment pipelines. Use when you need to automate quality gates, configure test run67.3Kskills.sh installs
limrun-expo-developmentlimrun-inc/skillsPrepare and run Expo / React Native apps on Limrun with Expo dev-client iteration. Use when the user wants an Expo dev build, Metro tunnel, hot reload, JS/TS it44.5Kskills.sh installs
golang-troubleshootingsamber/cc-skills-golangTroubleshoot Golang programs systematically - find and fix the root cause. Use when encountering bugs, crashes, deadlocks, or unexpected behavior in Go code. Co41.6Kskills.sh installsgolang-spf13-cobrasamber/cc-skills-golangGolang CLI command tree library using spf13/cobra — cobra.Command, RunE vs Run, PersistentPreRunE hook chain, Args validators (NoArgs, ExactArgs, MatchAll, cust38.6Kskills.sh installs