Cloudflare's security-audit-skill hits 35.7k stars, turns coding agents into auditors
Pytlicek · x · 2026-10-22
Cloudflare's open-source security-audit-skill has reached 35.7k stars on GitHub. The coding-agent skill runs a six-phase structured audit: reconnaissance, coverage-led vulnerability hunting, candidate validation, structured output, independent verification, and neutral reporting.
It's the single-repo starting point that grew into Cloudflare's fleet-wide vulnerability discovery harness. Advocates recommend running it on all software, even after prior model audits — it's model-independent and works in any agent harness. MIT licensed.
More from coding & agent
- Inside T800: Contrarian Reviews Handled by a Filter Agent Before Dispatch — lucasmeijer · 2026-10-22
- The "Seed to Scope" path for AI adoption inside companies: from one laptop to beating the team baseline — curious_vii · 2026-10-22
- Agents Search More Than Ever: Why Retrieval Quality Is Now the Bottleneck — Nils_Reimers · 2026-10-22
- Dev Leaves Claude Max Running Overnight in Two Terminals, Racks Up $2k+ Bill — Kuprel · 2026-10-22
- OpenClaw Dogfoods in Public: Building Features on X Using Its Own Agent, PR Included — vincent_koc · 2026-10-22
- AgentsInTheCloud: open-source tool to run cloud coding agents on your own server — lucasmeijer · 2026-10-22