Cloudflare/Security-Audit-Skill

Cloudflare has released a security-audit skill that transforms coding agents into security auditors by orchestrating a structured six-phase vulnerability discovery process: reconnaissance, coverage-led hunting, candidate validation, structured output, independent verification, and target-neutral reporting. The skill evolved from the foundation of Cloudflare's broader vulnerability harness and includes comprehensive hunting classes across multiple attack domains (web protocols, memory safety, supply chain, cloud infrastructure, etc.) along with validation tools to ensure rigorous, repeatable security audits. Multiple audit runs against the same repository are additive, allowing teams to progressively identify gaps and carry forward verified evidence without treating stale work as complete coverage.