Cloudflare open sources a six-phase security-audit skill for coding agents
alexcovo_eth · x · 2026-09-24
Cloudflare has open sourced security-audit-skill, a coding-agent skill that turns your agent into a security auditor. It picked up 2,400+ GitHub stars in a single day (20.7k total).
The skill orchestrates isolated agents through six phases:
- Reconnaissance: maps architecture, trust boundaries, and input surfaces into architecture.md and a coverage ledger
- Coverage-led hunting: assigns isolated hunters from ledger units, with coverage critics surfacing gaps
- Candidate validation: a fresh verifier tries to disprove each unique candidate
- Structured output: confirmed / needsvalidation / rejected findings with independent record verification and target-neutral reporting
It's the single-repo starting point that grew into Cloudflare's fleet-wide vulnerability discovery harness, documented in the accompanying 'Build your own vulnerability harness' post.
Related event: Cloudflare Open-Sources Security Audit Skill for Coding Agents(2 posts)→
More from coding & agent
- YouArt Desktop launches: AI agent edits video in CapCut, DaVinci and Premiere from client feedback — mhdfaran · 2026-11-11
- Boubou: one-command local voice AI that serves your phone and robots over Wi-Fi — LuozhuZhang · 2026-11-11
- Python 3.15 makes AttributeError actionable: suggests .append for .push mix-ups — KhuyenTran16 · 2026-11-11
- sentence-transformers maintainer releases new embedding pooling training method, code & checkpoints — tomaarsen · 2026-11-11
- droid-mcp turns your Android phone into an MCP server with 160+ tools for Claude Code — zvone1122 · 2026-11-11
- The decade of agents: simulate real customers to test your agent before launch — EXM7777 · 2026-11-11