# Security-audit-skill

> A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings. Added from the nightly trending feed on 2026-10-21 with 34,298 GitHub stars. So far only the licence comes from GitHub; the other facts are unknown until someone checks them.

- Repository: https://github.com/cloudflare/security-audit-skill
- Official docs: https://github.com/cloudflare/security-audit-skill#readme
- Checked: 2026-10-21

## What it replaces
Nothing people pay for: a free tool, listed because people search for it.

## Facts, with sources

| Question | Status | Answer | Source | Checked |
|---|---|---|---|---|
| Runs on my machine? | Confirmed | Yes, a skill installed into your local coding agent | https://github.com/cloudflare/security-audit-skill/blob/main/README.md#installation | 2026-10-21 |
| Code licence | Confirmed | MIT | https://github.com/cloudflare/security-audit-skill#license | 2026-10-21 |
| Model weights licence | Confirmed | No bundled weights; depends on the model your coding agent uses | https://github.com/cloudflare/security-audit-skill/blob/main/README.md#requirements | 2026-10-21 |
| Commercial use | Confirmed | Yes, MIT allows commercial use | https://github.com/cloudflare/security-audit-skill/blob/main/LICENSE | 2026-10-21 |
| Paid services needed? | Partial | Needs a coding agent with a tool-use model, which may need a paid plan or API key | https://github.com/cloudflare/security-audit-skill/blob/main/README.md#requirements | 2026-10-21 |
| Hardware | Unknown | Not checked yet | none found | - |
| Operating systems | Unknown | Not checked yet | none found | - |
| Setup effort | Confirmed | Easy; one npx skills add command (needs Node.js); a sandbox is needed to run target code | https://github.com/cloudflare/security-audit-skill/blob/main/README.md#installation | 2026-10-21 |

GitHub: 34298 stars, 2143 forks, last push 2026-09-14, archived: no.
---
Source: RepoQuarry (https://repoquarry.dev/projects/security-audit-skill). Data licence: CC BY 4.0. Quotes are from project documentation and belong to their authors.