howitworksCloudflare ka free AI security auditor: security-audit-skill + 2 aur skills
Cloudflare ki security-audit-skill (MIT, ~55k stars) Claude Code, Codex ya Cursor jaise coding agents ko security auditor bana deti hai. 6 phases: Reconnaissance (architecture.md, coverage-ledger.json), Coverage-led hunting (isolated hunters + coverage critics), Candidate validation (fresh verifier har finding ko disprove karne ki koshish karta hai), Structured output (findings.json: confirmed / needs_validation / rejected), Independent record verification, Target-neutral reporting (REPORT.md). Niyam: jo agent finding dhoondhta hai, wo kabhi use check nahi karta. Saath mein Matt Pocock ki skills (/grill-with-docs, /to-spec, /to-tickets, /implement, /code-review) aur claude-mem (sessions capture, compress, next session mein context inject).
Links
Aaj ye karo
- Pehle OS-enforced sandbox banao jismein external network band ho aur resource limits hon.
- Install: npx skills add https://github.com/cloudflare/security-audit-skill --skill security-audit
- Apne agent se bolo: security audit this codebase (ya: find security vulnerabilities in ./src).
- findings.json mein confirmed findings pehle theek karo; needs_validation wale khud verify karo.
npx skills add https://github.com/cloudflare/security-audit-skill --skill security-auditclaude plugin install mattpocock-skills@claude-plugins-officialnpx claude-mem installSources
Cloudflare GitHub README + blog, Matt Pocock aur claude-mem ke official repos, star-history; 1 Nov 2026 ko check kiya.