Turns your coding agent into a security auditor: separate sub-agents map the code, hunt for holes, then try to disprove every finding before it lands in a checked report.
In short: Turns your coding agent into a security auditor: separate sub-agents map the code, hunt for holes, then try to disprove every finding before it lands in a checked report. It is a free skill for people who use Claude Code, Codex or Cursor and want help with coding agent skills.
Checked on · Added
| Agent / tool | Access / cost | Link |
|---|---|---|
| Claude Code | Paid Claude plan or API | claude.com/claude-code |
| Codex | ChatGPT plan or API | openai.com/codex |
| Cursor | Free tier + paid | cursor.com |
| GitHub repo | Open source · ★ 34.9k | cloudflare/security-audit-skill |
npx skills add https://github.com/cloudflare/security-audit-skill --skill security-audit
Install command copied from the project README. Check the README for the latest version.
Turns your coding agent into a security auditor: separate sub-agents map the code, hunt for holes, then try to disprove every finding before it lands in a checked report.
A coding-agent skill that turns your agent into a security auditor. It orchestrates isolated agents through reconnaissance, coverage-led hunting, candidate validation, structured output, independent record verification,…
Short excerpt from the README of cloudflare/security-audit-skill. Read the full README on GitHub.
Use it only on code you own or are allowed to test. The README asks for a sandbox with no outside network when the audit builds or runs the target's code; without one, that code runs on your machine. One run finds only part of the problems (about half in Cloudflare's tests), so run it again for better coverage. Last code change was mid-September 2026.
Turns your coding agent into a security auditor: separate sub-agents map the code, hunt for holes, then try to disprove every finding before it lands in a checked report.
It works with Claude Code, Codex and Cursor. The code is on GitHub at cloudflare/security-audit-skill.
Free & open source (MIT), from Cloudflare. It runs on your own agent's model, and a full audit starts many sub-agents, so it uses a lot of tokens.
Run the install command from the README: “npx skills add https://github.com/cloudflare/security-audit-skill --skill security-audit”. Check the README on GitHub for the latest version, then follow the steps on this page.
We read 17 instruction and code files in the repo and found no red flags. That is not a guarantee, so review anything that runs commands on your machine.
All credit to the original authors. We rewrite in our own words and link back. Something wrong? Report it.
SKILLYour coding agent connects to an Android or Google TV over Wi-Fi, switches off the ad and tracking apps, and puts in a clean, Apple TV-style home screen. Nothing is uninstalled.
Claude Code +2★ 14.8k
SKILLA skills framework that makes agents brainstorm, plan, test and debug systematically.
Claude Code +1★ 299.2k
SKILLReal engineering skills from a well-known TypeScript educator's own .agents folder.
Claude Code +1★ 291.4k
SKILLA skill that pushes coding agents to act like a lazy senior: fewer lines, more tests, lower cost — without skipping the hard checks.
Claude Code +2★ 164.8k
SKILLSpecialist agent personas for engineering, design, marketing, sales and support you can drop into Claude Code, Codex or Cursor.
Claude Code +2★ 160.4k
SKILLThe official skills repo: frontend-design, docx, pptx, xlsx and more.
Claude Code★ 181.2kFree newsletter
New AI tools you can use right away, in plain words. Every Friday.