domains / families / security / cloudflare-security-audit

cloudflare-security-audit

authentic

Audit authorized codebases for exploitable vulnerabilities using scoped reconnaissance, adversarial review, validation, and structured reporting.

When to use

• Use this skill when asked to perform a security audit, find security bugs, do a security review, audit for vulnerabilities, or pen-test a codebase. Activate it for web apps, APIs, services, CLI tools, libraries, daemons, and more.

When not to use

• Requires a coding agent with a model that supports tool use and parallel sub-agents
• A trusted JSON Schema validator is required for structural validation in Phase 5
• Multiple runs are needed for full coverage — a single run typically finds roughly half of the total vulnerabilities
• The skill does not replace manual penetration testing or automated SAST/DAST tools

Skill page

Source