Skip to content
appsgit

Security Audit

Security Audit is an agent skill (a SKILL.md file) from cloudflare/security-audit-skill. Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. It works with Claude Code and has 25,435 GitHub stars. Install it by copying the skill folder into your agent's skills directory.

github.com/cloudflare/security-audit-skill/skills/security-audit (opens in a new tab)

Add this skill

Claude

Claude Code loads skills from ~/.claude/skills/ (all projects) or .claude/skills/ (one project):

git clone --depth 1 https://github.com/cloudflare/security-audit-skill.git
cp -r security-audit-skill/skills/security-audit ~/.claude/skills/security-audit   # personal, or .claude/skills in a project

In the Claude apps, zip the security-audit folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).

ChatGPT / Codex

Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:

git clone --depth 1 https://github.com/cloudflare/security-audit-skill.git
cp -r security-audit-skill/skills/security-audit .agents/skills/security-audit   # repo; ~/.agents/skills for all projects

Standalone skills also load in the ChatGPT desktop app.

Cursor

Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:

git clone --depth 1 https://github.com/cloudflare/security-audit-skill.git
cp -r security-audit-skill/skills/security-audit .cursor/skills/security-audit   # project; ~/.cursor/skills for all projects

Source (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)

What this skill does

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts.

When it triggers

  • Use for security questions, focused reviews, vulnerability research, security audits, or pen tests.

FAQ

Security Audit FAQ

Still curious? Email info@appsgit.com.

What is the Security Audit skill?

Security Audit is an agent skill (a SKILL.md file) from cloudflare/security-audit-skill. Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. It works with Claude Code and has 25,435 GitHub stars. Install it by copying the skill folder into your agent's skills directory. Its SKILL.md lives at github.com/cloudflare/security-audit-skill/skills/security-audit.

How do I install the Security Audit skill?

Copy the security-audit folder (the one containing SKILL.md) into ~/.claude/skills/ for Claude Code, .agents/skills/ for Codex or .cursor/skills/ for Cursor. The agent picks it up automatically when a task matches its description.

Is the Security Audit skill free?

Yes. The repository is open source under the MIT license.

Is Security Audit maintained?

The repository's most recent commit was on Sep 14, 2026. appsgit only lists skills from repositories with a commit in the last six months.