security-audit
Audit Codebases for Security Vulnerabilities
Security reviews often miss trust-boundary failures or produce weak evidence. This skill structures reconnaissance, isolated validation, independent verification, and actionable reporting.
Vor der Installation anhalten und eine Bestätigung anfordern.
Prüfen Sie den Plan und holen Sie vor Änderungen an Dateien die ausdrückliche Zustimmung des Benutzers ein.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "security-audit" from https://skillstore.io/skills/cloudflare-security-audit.md and its manifest at https://skillstore.io/api/skills/cloudflare-security-audit/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„security-audit“ wird verwendet. Review the account export endpoint for cross-tenant access.
Erwartetes Ergebnis:
The review traces tenant selection, authorization, export assembly, and download delivery. It reports confirmed boundary failures or exact validation blockers.
„security-audit“ wird verwendet. Run a standard audit of this service and prepare reports.
Erwartetes Ergebnis:
- Architecture and trust-boundary summary
- Coverage ledger with reviewed and deferred units
- Verified findings with evidence and focused fixes
- Separate needs-validation items for external assumptions
„security-audit“ wird verwendet. Check whether this parser crash is a security vulnerability.
Erwartetes Ergebnis:
The assessment distinguishes self-impact from a crossed trust boundary, records the observable result, and calibrates severity to demonstrated impact.
Sicherheitsaudit
SicherAll 400 cataloged static matches are false positives caused by defensive documentation, readable validator syntax, or bounded negative tests. The reviewed files show no malicious intent, prompt injection, credential access, obfuscation, or unsafe command construction. Static review was capped at 400/560 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
Risikofaktoren
⚙️ Externe Befehle (50)
⚡ Enthält Skripte (4)
📁 Dateisystemzugriff (50)
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/cloudflare-security-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/cloudflare-security-audit?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/cloudflare-security-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-security-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/cloudflare-security-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
cloudflare. (2026). security-audit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-security-audit/audits/1BibTeX-Zitat
@techreport{cloudflare-cloudflare-security-audit-2026,
author = {cloudflare},
title = {security-audit security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/cloudflare-security-audit/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "security-audit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "cloudflare"
date-released: "2026-09-17"
url: "https://skillstore.io/skills/cloudflare-security-audit/audits/1"
identifiers:
- type: other
value: "skillstore:cloudflare-security-audit:audit:1"
description: "Skillstore immutable audit report identifier"
Varianten vergleichen
5 installierbare VariantenJeder Autor bleibt ein eigener installierbarer Skill. Die empfohlene Variante wird nach Skillstore-Nachweisen bewertet.
Warum diese Variante zuerst steht
89jobrien-security-audit
2026-10-18
applelamps-security-audit
2026-10-24
cloudflare-security-audit
2026-09-22
consiliency-security-audit
2026-09-09
sickn33-security-audit
2026-09-09
Skillstore-Score
Warum dieser Score Evidenzvertrauen: MittelWas Sie erstellen können
Review an application release
Assess trust boundaries, authorization, data isolation, and deployment-sensitive risks before release.
Investigate a suspected vulnerability
Trace a specific claim through source and design a minimal local validation plan.
Standardize security assessments
Apply consistent coverage, evidence, verification, severity, and reporting requirements across repositories.
Diese Prompts ausprobieren
Review [file or component] for [security concern]. Identify the trust boundary, source evidence, impact, and smallest effective fix.
Audit [subsystem] for authorization, input validation, and data-isolation failures. Keep execution local and report unresolved deployment assumptions.
Perform a standard security audit of [repository]. Use the full workflow, create required report artifacts, and validate candidates in an enforced sandbox.
Perform a deep audit of [repository] within [scope]. Prioritize [critical assets], use independent verification, and document coverage gaps and validation blockers.
Bewährte Praktiken
- Define scope, authorization, profile, sandbox controls, and budget before beginning a full audit.
- Use dummy data and stop validation at the minimum local effect needed to prove the security outcome.
- Require source evidence, an affected principal, a crossed boundary, and independent verification for confirmed findings.
Vermeiden
- Do not execute target-controlled code without network, environment, filesystem, and resource isolation.
- Do not label missing best practices or unverified deployment assumptions as confirmed vulnerabilities.
- Do not test production systems, shared infrastructure, live identities, or external services.
Häufig gestellte Fragen
When does the skill run the complete audit workflow?
Can it review one suspected issue?
Does it execute repository code?
How does it reduce false positives?
What reports can it produce?
Can it assess deployed cloud controls?
Entwicklerdetails
Autor
cloudflareLizenz
MIT
Skillstore-Revision
r1
Versionshinweis
Der Autor hat keine Version angegeben.
Ref.
07adf1dffd3a2975d28aef39537f7db8cde3546f
Aktualität der Wartung
18.9.2026
Nutzung
0 Downloads · 0 Aufrufe