Security Audit
Security Audit is an agent skill (a SKILL.md file) from cloudflare/security-audit-skill. Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. It works with Claude Code and has 47,475 GitHub stars. Install it by copying the skill folder into your agent's skills directory.
github.com/cloudflare/security-audit-skill/skills/security-audit (opens in a new tab)
Data as of from the GitHub API and skills.sh; description from the skill's SKILL.md. Report an error
Add this skill
Claude
Claude Code loads skills from ~/.claude/skills/ (all projects) or .claude/skills/ (one project):
git clone --depth 1 https://github.com/cloudflare/security-audit-skill.git
cp -r security-audit-skill/skills/security-audit ~/.claude/skills/security-audit # personal, or .claude/skills in a projectIn the Claude apps, zip the security-audit folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).
ChatGPT / Codex
Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:
git clone --depth 1 https://github.com/cloudflare/security-audit-skill.git
cp -r security-audit-skill/skills/security-audit .agents/skills/security-audit # repo; ~/.agents/skills for all projectsStandalone skills also load in the ChatGPT desktop app.
Cursor
Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:
git clone --depth 1 https://github.com/cloudflare/security-audit-skill.git
cp -r security-audit-skill/skills/security-audit .cursor/skills/security-audit # project; ~/.cursor/skills for all projectsSource (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)
What this skill does
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts.
When it triggers
- Use for security questions, focused reviews, vulnerability research, security audits, or pen tests.
Similar skills
More security skills
Open Code Review
alibaba/open-code-review
Performs AI-powered code review on Git changes using the ocr CLI from alibaba/open-code-review.
Active · last commit Oct 20, 2026
SecurityGoBrowser Login
ruvnet/ruflo
Drive an authentication flow once, sanitize cookies through AIDefence, and vault a reusable cookie handle in browser-cookies for future sessions.
Active · last commit Oct 26, 2026
SecurityTypeScript007
sickn33/agentic-awesome-skills
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
Active · last commit Oct 24, 2026
SecurityPythonLearn MCP
rohitg00/ai-engineering-from-scratch
Focused interactive tutor for the Model Context Protocol (MCP) path in AI Engineering from Scratch.
Active · last commit Oct 23, 2026
SecurityPythonImprove Animations
emilkowalski/skills
Survey a codebase's animation and motion code as a senior motion advisor, then produce a prioritized audit and self-contained implementation plans for other agents (or cheaper models) to execute.
Maintained · last commit Oct 11, 2026
SecurityMarkdownResume Builder
reactive-resume/reactive-resume
Builds a complete resume from scratch as Reactive Resume JSON that conforms to the schema and imports at https://rxresu.me.
Active · last commit Oct 25, 2026
SecurityTypeScript
How do I install the Security Audit skill?
Copy the security-audit folder (the one containing SKILL.md) into ~/.claude/skills/ for Claude Code, .agents/skills/ for Codex or .cursor/skills/ for Cursor. The agent picks it up automatically when a task matches its description.
Is the Security Audit skill free?
Yes. The repository is open source under the MIT license.
Is Security Audit maintained?
The repository's most recent commit was on Sep 14, 2026. appsgit only lists skills from repositories with a commit in the last six months.