{"data":{"slug":"security-audit-skill","name":"Security Audit Skill","tagline":"MIT coding-agent skill for multi-phase security audits","category":"agents","categoryName":"AI Agents","url":"https://github.com/cloudflare/security-audit-skill","github":"https://github.com/cloudflare/security-audit-skill","pricing":"open-source","hook":"Cloudflare’s security-audit-skill turns a coding agent into a multi-phase security auditor with independently verified, machine-readable findings.","whatsGood":"MIT (cloudflare/security-audit-skill). Skill package for agent hosts: phased audit flow, verified findings, machine-readable output shaped for CI and review loops. First-party Cloudflare org surface (~7.7k★). Install into the agent’s skill path; no separate SaaS account for the skill itself.","theCatch":"Skill only — not a standalone SaaS scanner. Distinct from mcp-security-audit (awesome-copilot skill for .mcp.json / MCP config audits) and from OWASP ASI checklist skills: this is Cloudflare’s multi-phase code/security audit skill for a coding-agent host. You still need the agent runtime and any scanners the skill shells out to.","verdict":"MIT agent security-audit skill. Phased findings vs mcp-security-audit; not a SaaS scanner.","addedAt":"2026-09-17","featured":false,"domain":"AI Agents","subSpecialty":"Coding Agents","subcategory":"Coding Agents","tags":["self-host","permissive","coding-agents","skills","security","active","young-repo","fast-stars"],"capabilities":["security","audit","skills"],"surfaces":["Self-host","Hosted"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":31246,"starsPerWeek":1770,"access":"free","archived":false,"repo":{"createdAt":"2026-06-18","pushedAt":"2026-09-14","license":"MIT","archived":false,"checkedAt":"2026-10-19"}},"related":[{"slug":"claude-code","name":"Claude Code","tagline":"Terminal-first coding agent with deep repository context"},{"slug":"cursor","name":"Cursor","tagline":"The AI-first code editor that understands your codebase"},{"slug":"devin","name":"Devin","tagline":"Autonomous AI engineer for defined engineering tasks"},{"slug":"stagehand","name":"Stagehand","tagline":"AI-native browser automation that mixes code and natural language"},{"slug":"browser-use","name":"Browser Use","tagline":"Open-source framework for LLM-driven browser agents"}],"links":{"self":"/api/gems/security-audit-skill","html":"/gems/security-audit-skill","markdown":"/gems/security-audit-skill.md","category":"/api/gems?category=agents","categoryPage":"/stacks/agents"}}