Radar / AI security / Cloudflare security-audit-skill

Cloudflare security-audit-skill: turn your coding agent into a security auditor

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings.

trendingsecurity · complianceJEV traction 0.72cloudflare/security-audit-skill · 67,660 ★added 2026-11-06
Open Cloudflare security-audit-skill →View on the radar

Why it matters

Strongest debut on the Nov 5 GitHub trending board at #3: hunter agents map trust boundaries, then a fresh verifier tries to disprove each finding before it reaches the report.

What you could build with it

A small team shipping its first public API could run the skill before launch, getting a machine-readable audit report to fix or triage instead of hiring a firm for a first pass.

Does it hold up?

Too early to judge — the skill format is new and findings still need human review, though the built-in verifier step is designed to cut false positives.

Built with Cloudflare security-audit-skill

Learn more

official docs →

First spotted on github: source.

More AI security

NVIDIA SkillSpector: security scanner for AI agent skills, trending againNVIDIA's open-source SkillSpector scanner is trending on GitHub today: it audits AI agent skills before installation…security · JEV 0.75Shannon: open-source AI pentester that reports only vulnerabilities it can actually exploitCLI agent that combines source-code analysis with live exploitation against web apps and APIs under a 'no exploit, no…security · JEV 0.71AiSOC: open-source AI security operations center with agent triageSelf-hosted SOC that fuses alerts into incidents and hands them to LLM agents that record every prompt and tool call…security · JEV 0.71iFixAi: independent auditing of AI agents in under 120 secondsiFixAi audits whether an AI agent is doing what it is supposed to do, run by a human or by the agent itself, answering…security · JEV 0.68sapper-v2: autonomous pentest legion with an AI commander and worker swarmsapper-v2 is an autonomous penetration-testing system: an AI commander directs a worker swarm over a layered…security · JEV 0.6Anthropic FlashProve: cryptographic proof of which AI model actually answeredAnthropic open-sourced FlashProve, a research prototype that uses zkSNARKs to prove a response came from one specific…security · JEV 0.53

Get the week's best AI launches, plus 3 ideas worth building

One email every Saturday. Ranked by traction, not hype. Free.