Audit Codebases for Security Vulnerabilities
Security reviews often miss trust-boundary failures or produce weak evidence. This skill structures reconnaissance, isolated validation, independent verification, and actionable reporting.
ArrĂȘtez-vous et demandez confirmation avant lâinstallation.
Examinez le plan et obtenez le consentement explicite de lâutilisateur avant de modifier des fichiers.
Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.
Review the Skillstore skill "security-audit" from https://skillstore.io/skills/cloudflare-security-audit.md and its manifest at https://skillstore.io/api/skills/cloudflare-security-audit/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.
Utilisez ces liens lorsquâun Agent IA, un crawler ou un script a besoin dâun contexte propre au lieu de lire toute la page.
Utilisation de « security-audit ». Review the account export endpoint for cross-tenant access.
RĂ©sultat attendu:
The review traces tenant selection, authorization, export assembly, and download delivery. It reports confirmed boundary failures or exact validation blockers.
Utilisation de « security-audit ». Run a standard audit of this service and prepare reports.
RĂ©sultat attendu:
Utilisation de « security-audit ». Check whether this parser crash is a security vulnerability.
RĂ©sultat attendu:
The assessment distinguishes self-impact from a crossed trust boundary, records the observable result, and calibrates severity to demonstrated impact.
All 400 cataloged static matches are false positives caused by defensive documentation, readable validator syntax, or bounded negative tests. The reviewed files show no malicious intent, prompt injection, credential access, obfuscation, or unsafe command construction. Static review was capped at 400/560 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
Partagez le rapport dâĂ©valuation versionnĂ©, le badge neutre, la carte intĂ©grable et les citations. Skillstore prĂ©sente les preuves sans dĂ©cider si ce Skill est sĂ»r.
https://skillstore.io/skills/cloudflare-security-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/cloudflare-security-audit?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/cloudflare-security-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cloudflare-security-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/cloudflare-security-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>cloudflare. (2026). security-audit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cloudflare-security-audit/audits/1@techreport{cloudflare-cloudflare-security-audit-2026,
author = {cloudflare},
title = {security-audit security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/cloudflare-security-audit/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "security-audit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "cloudflare"
date-released: "2026-09-17"
url: "https://skillstore.io/skills/cloudflare-security-audit/audits/1"
identifiers:
- type: other
value: "skillstore:cloudflare-security-audit:audit:1"
description: "Skillstore immutable audit report identifier"
Chaque auteur reste un skill installable distinct. La variante recommandée est classée selon les preuves Skillstore.
Pourquoi cette variante est premiĂšre
89jobrien-security-audit
2026-10-18
applelamps-security-audit
2026-10-24
cloudflare-security-audit
2026-09-22
consiliency-security-audit
2026-09-09
sickn33-security-audit
2026-09-09
Assess trust boundaries, authorization, data isolation, and deployment-sensitive risks before release.
Trace a specific claim through source and design a minimal local validation plan.
Apply consistent coverage, evidence, verification, severity, and reporting requirements across repositories.
Review [file or component] for [security concern]. Identify the trust boundary, source evidence, impact, and smallest effective fix.
Audit [subsystem] for authorization, input validation, and data-isolation failures. Keep execution local and report unresolved deployment assumptions.
Perform a standard security audit of [repository]. Use the full workflow, create required report artifacts, and validate candidates in an enforced sandbox.
Perform a deep audit of [repository] within [scope]. Prioritize [critical assets], use independent verification, and document coverage gaps and validation blockers.
Auteur
cloudflareLicence
MIT
RĂ©vision Skillstore
r1
Avis de version
Lâauteur nâa dĂ©clarĂ© aucune version.
RĂ©f
07adf1dffd3a2975d28aef39537f7db8cde3546f
RĂ©cence de maintenance
18/09/2026
Utilisation
0 téléchargements · 0 vues
Structure de fichiers
đ AI-AND-LLM.md
đ ATTACK-CLASSES.md
đ CLIENT-SIDE.md
đ DATA-ISOLATION-AND-LIFECYCLE.md
đ DESKTOP-MOBILE-AND-LOCAL-IPC.md
đ HUNTING.md
đ MEMORY-SAFETY-AND-BINARY.md
đ PROTOCOLS-RPC-AND-MESSAGING.md
đ RECONNAISSANCE.md
đ report-schema.json
đ RESOURCE-EXHAUSTION-AND-AVAILABILITY.md
đ SKILL.md
đ SUPPLY-CHAIN-AND-RELEASE.md
đ validate-coverage-ledger.cjs
đ validate-coverage-ledger.test.cjs
đ validate-findings.test.cjs
Plan Cloudflare One Migrations
Legacy security policies often lack direct Cloudflare One equivalents. This skill builds an accountable migration map, staged rollout, validation plan, and rollback path.
Build Cloudflare K2 Streams With Current Documentation
Cloudflare K2 setup and troubleshooting require current API details, configuration rules, and delivery semantics. This skill directs your assistant to relevant documentation before providing guidance.
Profile Cloudflare Workers CPU and Memory
CPU hotspots and memory allocation pressure can make deployed Workers and Durable Objects difficult to diagnose. This skill guides profiling, evidence analysis, and targeted optimization.
Build Stable Cloudflare Sandbox Apps
Cloudflare Sandbox projects can fail when stable and preview packages, images, or APIs are mixed. This skill keeps implementation aligned with the stable release.
Migrate Cloudflare Sandbox Apps to SDK 1.0
Stable Sandbox applications require coordinated API, image, and deployment changes for SDK 1.0. This skill performs the migration and validates the result.
Design and Troubleshoot Cloudflare One
Cloudflare One deployments span identity, traffic, devices, private networks, and data controls. This skill structures design, configuration, troubleshooting, validation, and staged rollout decisions.
Renforcer les revues de sécurité des applications
par alirezarezvani
Les revues de sécurité manquent souvent de listes de contrÎle cohérentes et de flux de travail réutilisables. Cette compétence fournit des structures de base pour les revues de sécurité, des conseils de référence et des scripts de reporting simples pour Claude, Codex et Claude Code.
Renforcer les dĂ©cisions dâingĂ©nierie de la sĂ©curitĂ©
par 89jobrien
Le travail de sĂ©curitĂ© couvre souvent lâarchitecture, lâidentitĂ©, la conformitĂ©, les tests et la planification de la rĂ©ponse. Cette compĂ©tence fournit Ă Claude, Codex et Claude Code des conseils structurĂ©s en ingĂ©nierie de la sĂ©curitĂ©.
Créer des modÚles de menace pytm sous forme de code
par AgentSecOps
La modĂ©lisation des menaces devient souvent obsolĂšte et dĂ©connectĂ©e des changements dâarchitecture. Cette compĂ©tence aide Ă crĂ©er des modĂšles pytm, des analyses STRIDE et des workflows de diagrammes pour les revues de sĂ©curitĂ© et la CI.
Exécuter des tests de sécurité web OWASP
par sickn33
Les Ă©quipes web ont besoin dâune mĂ©thode rĂ©pĂ©table pour vĂ©rifier les risques applicatifs courants avant une mise en production. Cette compĂ©tence organise les tests OWASP en phases, prompts et Ă©tapes de reporting.
Valider les compĂ©tences dâagent avant la publication
par JckJhns
Les auteurs de skills ont besoin de preuves quâune skill fonctionne et nâexpose pas les utilisateurs Ă des risques Ă©vitables. SkillCheck examine la structure, la sĂ©curitĂ©, les evals, les scripts et les sorties au moyen de vĂ©rifications par niveaux.
Review Defects and Verify Root-Cause Repairs
par aakashh242
Reviews can miss failure conditions or accept fixes without reliable evidence. Gauntlet guides scoped adversarial reviews, authorized repairs, and revision-bound verification within a finite budget.