# Cloudflare releases coding-agent security-audit skill

_Published Thursday, September 17, 2026 at 12:19 PM EDT · Security · Latest · Tier 2 — Notable_

![A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings - cloudflare/security-audit-skill — Primary](https://opengraph.githubassets.com/fff9138e6996a811c569a6873ebad524fbd86531703386c5c7c481c77f031d29/cloudflare/security-audit-skill)

Cloudflare released an open-source coding-agent skill for structured security audits. The repository describes a six-phase process covering reconnaissance, coverage-led hunting, candidate validation, structured findings, independent record verification and reporting. It says the skill seeded Cloudflare's vulnerability-discovery harness and is intended as a single-repository starting point. The workflow records confirmed, needs-validation and rejected findings, with validators for coverage and findings records. Cloudflare says the tool requires an OS-enforced sandbox before it executes target code.

## Sources

- [github.com](https://github.com/cloudflare/security-audit-skill)

---
Canonical: https://techandbusiness.org/newswire/cumRMnszd1hcyR6uKpHQDb
Published: 2026-09-17T16:19:09.736Z
Story chronology: 2026-09-17T04:36:55.000Z
Retrieved: 2026-09-17T19:12:55.799Z
Publisher: Tech & Business (techandbusiness.org)