What is security-audit?
security-audit is a Claude skill by cloudflare that security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security. It is listed under Engineering practice and has 30,762 GitHub stars.
| Type | Claude skill |
|---|---|
| Author | cloudflare |
| Repository | cloudflare/security-audit-skill |
| Popularity | 30,762 GitHub stars |
| Category | Engineering practice |
| Security | Low risk (96/100) |
| Rank | #193 of 1,262 Claude skills; #38 in Engineering practice |
| SKILL.md length | 192 lines |
| License | MIT |
| Last commit | 2026-09-14 |
| Stars this week | +2,470 |
| Installs in the last 24h | 1,000 |
Is security-audit safe to install?
security-audit scores 96/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 8 of 9 checks.
Skill results come from a static scan of its SKILL.md for instruction overrides, hidden actions, risky commands and credential access.
| Check | Result |
|---|---|
| No instruction-override phrases | Pass |
| No hidden actions | Pass |
| No pipe-to-shell installers | Pass |
| No obfuscated code | Pass |
| No destructive commands | Pass |
| Reads keys or credentials | Note |
| No network requests | Pass |
| No shell commands | Pass |
| Installs no packages | Pass |
What the scan matched
- credentials:
credentials
How do I install security-audit?
- Install with the skills CLI. Works for Claude Code and other agents that read skills.
npx skills add https://github.com/cloudflare/security-audit-skill --skill security-audit
- Or copy it by hand. Claude Code loads any folder with a SKILL.md from ~/.claude/skills.
git clone https://github.com/cloudflare/security-audit-skill cp -r security-audit-skill/skills/security-audit ~/.claude/skills/security-audit
- Use it. Claude loads the skill when a task matches its description. You can also name it in your prompt.
Use the security-audit skill to …
Or ask Claude to set it up
Paste this into Claude Code and it installs security-audit for you:
Install the "security-audit" skill from https://github.com/cloudflare/security-audit-skill/tree/main/skills/security-audit into ~/.claude/skills, then tell me in one line what it does.
More from cloudflare/security-audit-skill
This repository has 2 Claude skills on MCPMods.
- security-audit-skill: Multi-phase security audits with independently verified, machine-readable findings (Not scanned)