Reading the repo
Reading the repo
Assembly instructions
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
Saved setup from 3 h ago
Will it work on my device?
Start your coding agent in (or pointed at) the codebase you want to audit, then ask it to do a security audit:
security audit this codebase
find security vulnerabilities in ./src
do a security review, output to ~/audits/my-project
The skill activates automatically when the request matches its trigger (security audit, find vulnerabilities, pen-test the code, etc.). A direct codebase audit or pen-test request uses full audit mode. Security questions and focused vulnerability work use guidance mode unless you request report artifacts. In full audit mode, an unspecified output directory defaults to ~/security-audit-skill/<repo-name>/run-<N>. The workflow writes inside the target repository only when you explicitly select a directory that version control ignores.
Needs Git: xcode-select --install
git clone https://github.com/cloudflare/security-audit-skill.git cd security-audit-skill
In the maintainers' order. Do the README instructions above first — they cover steps outside the terminal.
security audit this codebase find security vulnerabilities in ./src do a security review, output to ~/audits/my-project
No reports for macOS yet.
Claude reads the 1 key files and writes a step-by-step guide for macOS. Once written, it's saved for everyone.