Updated 1mo ago
by cloudflare
security-audit-skill
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
29.9k GitHub stars (29,919)
+7.9k in 20 days
| Period | New stars |
|---|---|
| Sep 27 | +51 |
| Sep 28 | +311 |
| Sep 29 | +642 |
| Sep 30 | +408 |
| Oct 1 | +54 |
| Oct 2 | +201 |
| Oct 3 | +134 |
| Oct 4 | +146 |
| Oct 5 | +372 |
| Oct 6 | +507 |
| Oct 7 | +562 |
| Oct 8 | +693 |
| Oct 9 | +552 |
| Oct 10 | +334 |
| Oct 11 | +921 |
| Oct 12 | +477 |
| Oct 13 | +486 |
| Oct 14 | +471 |
| Oct 15 | +319 |
| Oct 16 | +301 |
- 1 skill (1 skills found in its SKILL.md files)
- 1.9k forks (1,854 forks)
- 1mo ago last update (Last updated 1mo ago)
Install
Skills CLI
npx skills add cloudflare/security-audit-skill
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/cloudflare/security-audit-skillcp -r "security-audit-skill/skills/security-audit" ~/.claude/skills/
Copies the security-audit skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add cloudflare/security-audit-skill
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
security-audit
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts.
skills/security-audit/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.