#cloudflare

Use when a user wants a security audit of their own codebase, vulnerability hunting, penetration-style review, or analysis of security issues in a specific piece of code. Based on Cloudflare's open-source security-audit-skill (MIT): reconnaissance, parallel vulnerability hunting, one-by-one attempts to refute each finding, independent review, and report generation. Reads source code only, does not touch production, does not run target code without a sandbox, and speculation does not count as a vulnerability. Use case: Have an Agent run a structured security audit of your own codebase, where every suspicion is verified by another Agent, producing a report with evidence.

Intermediate tutorial: without buying a server, use the ShipAny TanStack template and Claude Code to deploy, in about half an hour, a website with login, membership payments (Alipay and WeChat Pay supported) and an admin backend to Cloudflare Workers + D1, then bind your own domain. Starting from signing up for GitHub, linking your account in the ShipAny backend, and pulling the code, even beginners can follow along.

Some source code can pass Cloudflare's human verification, but models like Claude have too strong a moral stance and refuse to help you get around it. Consider using another model.