The past couple of weeks have really proven what some experts have been saying for years. AI is coming for everyone, and it’s coming through vulnerabilities in the software we use every day.
Don’t believe me? Check out this chart of CVEs.
Of all the “critical” software bugs in all of human history, 3% were found just in the last month. This is what AI is doing to software.
So how do software engineers stay ahead of this? There is legitimately only one way.
With serious AI augmentation to help find and remediate security problems, including ones that aren’t just CVEs inside a dependency.
Why Cloudflare’s security audit skill is useful
Cloudflare just released a security audit skill that you can turn loose on your own codebase to help you find and fix vulnerabilities.
Sure, you can just ask Claude “find any security problems in my app”. It might even find some! But that doesn’t compare to a methodical security audit.
Here’s what the security audit skill does
Map the codebase
Hunt for vulnerabilities
Challenge each candidate
Record the findings
Verify the findings
Report what’s confirmed, rejected, or still needs validation
I am running this on all my active projects, and I recommend you do the same. You can do it in any harness that uses the Skill standard, including Claude Code, Codex, and Cursor. I’ll show you how.
If you’re deep enough into AI that you’re using it to run security audits, you’re obviously in the right spot. I spend dozens of hours researching each of these guides so you have a shortcut to building software with AI.
I’d love to have you join us and get notified when we share more tutorials like this.
How to install the security audit skill from Cloudflare
You can read all of the skill contents on GitHub. I actually recommend using the Skills CLI to install the skill locally, which essentially copies the markdown files into a place on your computer that coding agents know to look for it.
You just have to run:
npx skills add https://github.com/cloudflare/security-audit-skill \
--skill security-auditIf it’s your first time using the Skills CLI, it’ll ask you if you have any not-common harnesses you want to support.
