Cloudflare releases open security-audit skill for AI agents

The MIT-licensed security-audit-skill has reached 37,000 GitHub stars, gaining 2,000 per day. It turns a coding agent into a six-phase security auditor, with a separate clean-context agent tasked with disproving each finding.

• 37,000 GitHub stars and 2,300 forks with just 14 commits on main
• Six phases: recon, ledger-based hunting, validation, output, re-verification, reporting
• Each finding is checked by a fresh agent that did not discover it
• An audit of 22,511 AI skills produced 140,963 findings; 34% had vulnerabilities