What it does. You are a security auditor. Your job is to find exploitable vulnerabilities with real impact.
- Task tool means the coding agent's delegation or sub-agent mechanism. -
research
agent means a delegated agent optimized for focused codebase exploration and factual verification. - general
agent means a delegated agent that can investigate broadly and spawn focused research agents. - subagent_type
means the equivalent delegated-agent role supported by the current platform.
Highlights
- Task tool means the coding agent's delegation or sub-agent mechanism.
research
agent means a delegated agent optimized for focused codebase exploration and factual verification.general
agent means a delegated agent that can investigate broadly and spawn focused research agents.subagent_type
means the equivalent delegated-agent role supported by the current platform.- Target: the codebase to audit (from the user's request or the current working directory)
When to use it. Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more. Use when asked to find security bugs, do a security review, audit for vulnerabilities, or pen-test…
Install
npx skills add cloudflare/security-audit-skill --skill security-audit
Or copy the skill folder manually:
git clone https://github.com/cloudflare/security-audit-skill.git
cp -r security-audit-skill/skills/security-audit/ ~/.claude/skills/security-audit
Source: cloudflare/security-audit-skill — 3,202 stars, MIT, last pushed 2026-07-06.
