Security Audit Skill for coding agents
Security Audit Skill is a coding-agent skill for a six-phase security audit. A fresh agent checks the findings. MIT.
Key features
- Runs reconnaissance, coverage-led hunting, candidate validation, and structured output
- Independent agents verify records, then reports are derived from those records
- Writes confirmed, needs_validation, and rejected records to findings.json
- Validates findings and the coverage ledger with zero-dependency Node scripts
- Installs with npx skills add and the skill name security-audit
- Needs a coding agent with tool use and parallel sub-agents, plus Node.js
- Without an OS-enforced sandbox, executing target code stays needs_validation
- MIT License, copyright 2025-2026 Cloudflare, Inc.
- Category
- Dev Tools
- Who it's for
- Developers who want a coding agent to audit a repository and keep machine-readable findings.
- Tags
- securityagentcoding-agentsandboxjavascript
- Website
- github.com
- Listed
- 2026-10-25
Frequently asked questions
Is Security Audit Skill free?
Yes. Security Audit Skill is open source and free to use.
What is Security Audit Skill used for?
Coding-agent skill for a six-phase security audit with machine-readable findings and independent verification. MIT. Typical uses: runs reconnaissance, coverage-led hunting, candidate validation, and structured output; independent agents verify records, then reports are derived from those records; writes confirmed, needs_validation, and rejected records to findings.json.
What are the best Security Audit Skill alternatives?
Alternatives in the same category include SkillSpector, Agent Toolkit for AWS, Docker, open_scion, Puter Everything.
Related in Dev Tools
See all →- SkillSpector Security scanner for AI agent skills. It scans Git repos, URLs, zip files, directories, and single files. Apache 2.0.
- Apache Caldera Open-source cybersecurity framework for automated adversary emulation and security assessments.
- Agent Toolkit for AWS Gives your coding agent the tools, knowledge, and guardrails to build production-ready infrastructure on AWS.
- Astro Web framework for content sites, with islands of client JavaScript.
- Biome Formatter and linter for JavaScript and TypeScript.
- Bun JavaScript runtime, bundler, and package manager.
