Reading the repo
Reading the repo
How to install on Linux
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
Saved setup from 2 h ago
Will it work on my device?
Start your coding agent in (or pointed at) the codebase you want to audit, then ask it to do a security audit:
security audit this codebase
find security vulnerabilities in ./src
do a security review, output to ~/audits/my-project
The skill activates automatically when the request matches its trigger (security audit, find vulnerabilities, pen-test the code, etc.). A direct codebase audit or pen-test request uses full audit mode. Security questions and focused vulnerability work use guidance mode unless you request report artifacts. In full audit mode, an unspecified output directory defaults to ~/security-audit-skill/<repo-name>/run-<N>. The workflow writes inside the target repository only when you explicitly select a directory that version control ignores.
Then run bash setup.sh. It stops at the first error and is safe to run again. Servers and tests aren't started; it lists them at the end. Read it first.
git clone https://github.com/cloudflare/security-audit-skill.git cd security-audit-skill
In the maintainers' order. Do the README instructions above first — they cover steps outside the terminal.
security audit this codebase find security vulnerabilities in ./src do a security review, output to ~/audits/my-project
No reports for Linux yet.
Opens a chat with this manual already filled in, for Linux. It uses your own account; gitmanual sends nothing.