DigiNews

Summary

Cloudflare's security-audit-skill is an open-source framework that orchestrates multi-agent security audits across a codebase. It defines six phases—Reconnaissance, Coverage-led hunting, Candidate validation, Structured output, Independent record verification, and Target-neutral reporting—with validators and a coverage ledger to ensure traceable findings. The project originates from Cloudflare's vulnerability-harness work and includes documentation and tooling for automated security assessment workflows.