# cloudflare/security\-audit\-skill Cloudflare security\-audit\-skill: An AI\-Powered Security Auditing Tool - HackerByte page: - GitHub: - Programming language: JavaScript A coding\-agent skill for multi\-phase security audits with independently verified, machine\-readable findings ## AI-generated summary The security\-audit\-skill transforms a coding agent into a sophisticated security auditor. It automates multi\-phase security audits, from reconnaissance and vulnerability hunting to independent verification and structured reporting. The skill is designed to identify and report security findings in a machine\-readable format, building upon Cloudflare's extensive vulnerability discovery harness. ## Key points - Automates security audits in six distinct phases: reconnaissance, coverage\-led hunting, candidate validation, structured output, independent record verification, and target\-neutral reporting. - Generates machine\-readable findings in \`findings.json\` and \`coverage\-ledger.json\`, with a detailed \`REPORT.md\`. - Requires a coding agent capable of tool use and parallel sub\-agents, along with Node.js for validators. - Employs adversarial validation where the agent verifying a finding is never the one that discovered it. - Designed to be additive across multiple runs, improving coverage and revalidating changes.