Enterprise DNAEnterprise DNA

Skills

security-audit

by cloudflare

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Our verdict

Not reviewed yet

We have not reviewed security-audit yet

No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.

How we review records

From the listing

About security-audit

A coding-agent skill from Cloudflare that runs multi-phase security audits and produces independently verified, machine-readable findings. It integrates with coding agents to automate security review workflows.

Best for

Development teams using coding agents that need automated, verifiable security audits.

Use cases

  • Automate security audits in CI/CD pipelines
  • Generate machine-readable audit reports for compliance
  • Integrate with coding agents for continuous security review

Notes

48,029 stars on GitHub. Last updated 2026-09-14. Licensed MIT.

Pros

  • Independently verified findings increase reliability
  • Multi-phase approach covers deeper analysis
  • Backed by Cloudflare's security expertise

Cons

  • Requires JavaScript environment and coding-agent setup
  • May need configuration for specific project contexts
  • Audit scope limited to what the skill is designed to check

Key facts

What we have checked

Installs
50.9K
Checked skills.sh

Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.

Health and security

Is security-audit looked after, and what do its setup files show

Security check static checks

97 out of 100

Reads what is published about the server: package advisories, licence, secrets in the documented setup and tool permissions. Nothing is installed or run, so this is not a security assessment. Checked by edna-skill-static-v1 main@c1c8a8c14710. What it checks

  • Low Tells the agent to skip permission or approval prompts: skills/security-audit/ATTACK-CLASSES.md, line 114.
  • Note No dependency list or install command was found in the skill, so there were no packages to look up on OSV.

Alternatives

Alternatives to security-audit

RecordTypeHow we knowChecked
audit-websiteAlternative to thisSkillMatched from the listing text

Compare

Compare security-audit side by side

Sources

Where this comes from

  • skills.shThird party

    Checked · Installs

A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.

Changelog

What changed

No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.

Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

No spam. Unsubscribe any time.