security-audit-skill

security-audit-skill

Multi-stage security auditing skill that delivers independently verified, machine-readable results.

Agent SkillDevOpen source
Type
Agent Skill
Open source
Yes
GitHub Stars
★ 1.5k
Source
skill-github

Overview

This skill transforms your agent into a security auditor. It discovers exploitable vulnerabilities with real-world impact through a six-stage pipeline (reconnaissance, hunting, validation, reporting, structured output, and independent verification). Each stage has specific tasks such as architecture mapping, code exploitation, and validation of findings. It ultimately generates human-readable reports and detailed JSON-formatted results. Ideal for developers and teams needing to perform security audits on codebases.

Capabilities

  • Multi-stage security auditing
  • Independent validation of findings
  • Generation of detailed reports
  • Structured output
  • Support for multiple runs

Use cases

Codebase security auditingVulnerability discoverySecurity reviewAutomated security testing

Setup

Requires: Node.js环境支持工具使用的编码代理
Install using Skills CLI: `npx skills add https://github.com/cloudflare/security-audit-skill --skill security-audit`

This information was compiled by AI from public sources and may contain inaccuracies — please refer to the source.

FAQ

How do I get started with this skill?

Launch the coding agent and request a security audit, for example `security audit this codebase`.

Do I need to configure an API Key?

Not required, but you need a Node.js environment and a coding agent.

Related skills