cloudflare/security-audit-skill
A multi-phase security audit skill for coding agents. It maps the architecture, hunts for issues unit by unit, and has a fresh agent try to disprove each finding before it is kept. Results are written as schema-checked findings.json, and target code runs only in a no-network sandbox.
Not tested yetKey files read, not run
How we know
We read the README and key files, not every source file, and did not run it, so the most we can say is Idea adapted or Risky.
Good for
Teams who want a thorough, repeatable source audit of a codebase and can afford one long multi-agent run.
Not for
A quick one-off scan or daily CI use. Each run is heavy, and you must provide an OS-enforced sandbox yourself before target code can run.
Repo
- Stars
- 7,188
- License
- MITUse it, change it, sell it, closed-source included. Keep the author's copyright notice.
- Maturity
- active
- Last push
- 2026-09-14
- Last checked
- 2026-11-14