# security-audit

- **Publisher**: Cloudflare (Verified Publisher)
- **Repository**: https://github.com/cloudflare/security-audit-skill
- **skills.sh URL**: https://skills.sh/cloudflare/security-audit-skill/security-audit
- **License**: MIT
- **Stars**: 56,873
- **Canonical Web Page**: https://builderthread.dev/skill/cloudflare/security-audit-skill/security-audit
- **Parent Topic**: [security](https://builderthread.dev/skill/for/security.md)
- **Last Verified**: 2026-11-02
- **Supported Coding Agents**: Claude Code, Cursor, Codex, Windsurf

## Description
Automated security review checking for exposed secret keys, insecure SQL queries, cross-site scripting (XSS), missing authorization guards, and permissive CORS.

## Install Command
```bash
npx skills add cloudflare/security-audit-skill --skill security-audit
```

## When to Use This Skill
- Conducting automated security reviews before merging pull requests
- Auditing full-stack codebases for hardcoded credentials and token leakage
- Verifying that public API routes have appropriate rate limiting and auth checks

## Files Inside Package
- `SKILL.md`
- `references/audit-rules.md`
- `references/reporting.md`

---

## Production Grade Starter Repo

Pre built starter repo with auth, databases, backend, and AI integrations already configured based on your tech stack of choice (worth $200+ and saves you 30+ hours of configuration).

- Supported languages: TypeScript, React Native, Rust, Go, Python, Java
- Frameworks: 18+ Frontend frameworks, 45+ Backend frameworks
- Start now: https://builderthread.dev/auth/signup