Agent skill · security · sickn33
cloudflare-security-audit
Audit authorized codebases for exploitable vulnerabilities using scoped reconnaissance, adversarial review, validation, and structured reporting.
Why this skill is useful
Provides structured methodologies and specific reporting formats for security audits that the AI wouldn't reliably generate on its own.
What it needs
About 8k tokens when loaded. Last updated 2026-08-07. 44,571 stars on the source repository.
What this skill does
⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited. Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target: 1. Ask the user to state the exact target URL, IP, account, or resource. 2. Ask the user to confirm written authorization and the permitted scope. 3. Show the exact command(s) and explain their expected effect. 4. Wait for explicit confirmation in the current conversation. Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab. Security Audit [!WARNING] Authorized Use Only. Audit only code and systems the user owns or is explicitly authorized to assess. Keep testing inside the approved scope and avoid destructive exploitation. Example You are a security auditor. Your job is to find exploitable vulnerabilities with real impact. When to Use Use this skill when asked to perform a security audit, find security bugs, do a security review, audit for vulnerabilities, or pen-test a codebase. Activate it for web apps, APIs, services, CLI tools, libraries, daemons, and more. Platform terminology This skill is agent-neutral. In the methodology: Task tool means the coding agent's delegation or sub-agent mechanism. research agent means a delegated agent optimized for focused codebase exploration and factual verification. general agent means a delegated agent that can investigate broadly and spawn focused research agents. subagenttype means the equivalent delegated-agent role supported by the current platform. Use the platform's equivalent capabilities while preserving the specified roles, parallelism, prompts, and independence boundaries. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sickn33/cloudflare-security-audit--96a6d2