GStars
    cloudflare

    cloudflare/security-audit-skill

    #1 this week

    A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

    security
    JavaScript
    MIT
    42.2K stars
    2.6K forks
    42.2K GitHub watchers
    Updated Oct 24, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    Ranks #1 of 3,103 repositories GStars tracks this week (top 1%).

    This week's +11,223 stars is ahead of its 30-day pace of about +4,796 per week.

    The project lists 3 contributors on GitHub.

    Peaked at #1 in the weekly ranking the week of Sep 13, its best in the past year.

    Use Cases & Benefits

    • Orchestrates multi-phase automated security audits using parallel coding agents to identify exploitable vulnerabilities with verified, machine-readable findings.
    • Ensures high accuracy by adversarially validating findings and independently verifying each claim against source code to minimize false positives.
    • Use for conducting comprehensive security reviews of codebases with automated reconnaissance, attack simulation, and detailed reporting.
    • Use for integrating continuous vulnerability discovery into development workflows by running additive audits that build on prior findings.
    • Use for generating structured, standardized security reports and JSON outputs suitable for further analysis or compliance documentation.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    MIT

    Permissive: commercial use, modification and redistribution are allowed with attribution.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    • No GitHub releases; pin a commit or tag instead of a release.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impact.

    This is the skill that seeded Cloudflare's vulnerability discovery harness, described in Build your own vulnerability harness. The harness grew into a multi-stage, fleet-wide system; this skill is the single-repo starting point it evolved from.

    The skill runs a structured audit in six phases:

    Multiple runs against the same repo are additive. Each run explores different code paths; the skill reads prior findings.json files to skip known issues and target gaps.

    Excerpt from the cloudflare/security-audit-skill README on GitHub (MIT license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Aug 29: +9Sep 16: +1,560Sep 17: +3,741Sep 18: +2,727Sep 19: +2,868Sep 20: +1,940Sep 21: +1,037Sep 22: +1,164Sep 23: +791Sep 24: +473Sep 25: +325Sep 26: +385Sep 27: +314Sep 28: +396Oct 2: +140Oct 3: +167Oct 4: +235Oct 5: +547Oct 6: +531Oct 7: +616Oct 8: +684Oct 9: +353Oct 10: +606Oct 11: +762Oct 12: +178Oct 13: +408Oct 14: +469Oct 15: +320Oct 16: +301Oct 17: +330Oct 18: +470Oct 19: +448Oct 20: +1,383Oct 21: +1,688Oct 22: +2,260Oct 23: +3,086Oct 24: +2,570

    +39,005 stars over 57 days across 41 snapshot days; best day +3,741 on Sep 17.

    Forks

    2.6K+2.4K

    Open issues

    83+77

    Compared with peers in Security

    Fastest-growing repositories GStars tracks in this cohort for the week of Oct 18, by 7-day star growth

    View category →
    cloudflare/security-audit-skill compared with Security repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    cloudflare/security-audit-skill42.2K+11.2K75—
    vxcontrol/pentagi32.2K+1.5K7518 days ago
    Asymptote-Labs/agent-beacon2.7K+856601 day ago
    martin-olivier/airgorah4.7K+5317527 days ago
    caddyserver/caddy78.3K+2727520 days ago
    gitleaks/gitleaks30.3K+26848216 days ago
    Category median30.3K+53175—
    Compare security-audit-skill with pentagi, agent-beacon, airgorah →

    Also by cloudflare

    Other repositories from this maintainer that GStars tracks

    Discover Repositories

    Search across tracked repositories by name or description