Automated security auditing with artificial intelligence
Developed by Cloudflare, security-audit-skill is a skill package that enables coding agents to perform multi-stage security audits. It automates security standards in software development processes by generating machine-readable and independently verified findings.
Updates
- November 7, 2026: Stars 59,720 → 64,344.
- November 5, 2026: Stars 56,728 → 59,720.
- November 2, 2026: Stars 53,211 → 56,728.
- October 30, 2026: Stars 50,665 → 53,211.
What you get
- Performs multi-stage security scanning on the codebase
- Confirms findings with independent verification
- Generates standardized security reports
Installation
npx skills add https://github.com/cloudflare/security-audit-skill \
--skill security-auditnpx skills add https://github.com/cloudflare/security-audit-skill \
--skill security-audit \
--globalIf you don't write code
Initiate a comprehensive security audit for this codebase. Map the architecture to identify entry points, then perform a multi-stage scan to detect vulnerabilities. Subject each potential vulnerability you find to an independent verification process, classifying them as verified, requiring verification, or rejected. Report the results in a structured format and document all findings according to the project's security standards.
Repository: https://github.com/cloudflare/security-audit-skill. Follow the official instructions in the README of this repository for setup and execution.
Before starting, check which OS we are on and if the necessary tools (e.g., Python, Node.js, Git, Docker) are installed. Install any missing ones step-by-step according to this system.
Create a new, empty folder to work in. Do not touch any files outside this folder and do not delete anything. Tell me what you are going to do in one sentence before running each command.
Tell me what I should see on the screen at the end of each step. If an error occurs, I will paste the error message to you exactly as it is, and we will fix it together.
Related dictionary terms
Links
TreScout did not build this tool · we found it in GitHub trends and wrote it up. This page describes the repository as of 2026-09-18: The star count and our text belong to that day, the repository may have changed since. Check the repository link for the current state. The introductory text was prepared with AI from the repository's own documentation, and this page was machine-translated from the Turkish original · the Turkish version prevails.