{
 "schema_version": 1,
 "generated": "2026-10-23",
 "id": "cloudflare-security-audit-skill--focused-vulnerability-check-of-a-module",
 "repo": "cloudflare/security-audit-skill",
 "repo_url": "https://github.com/cloudflare/security-audit-skill",
 "repo_slug": "cloudflare-security-audit-skill",
 "title": "Check one directory for security vulnerabilities",
 "page_title": "How to check one directory for security vulnerabilities with Security Audit Skill",
 "summary": "Point the agent at a single path for a quick security read without report artifacts.",
 "who": "A developer reviewing a pull request or a single module who has a specific security question.",
 "problem": "A full audit is too heavy for a question about one part of the code.",
 "outcome": "Focused guidance on likely vulnerabilities in the chosen path, without the full set of audit output files.",
 "steps": [
  "Install the skill with `npx skills add https://github.com/cloudflare/security-audit-skill --skill security-audit` (inferred, check the README)",
  "Start your coding agent in the repository.",
  "Ask the agent: `find security vulnerabilities in ./src`",
  "Review the guidance the agent returns and ask follow-up questions on any item you want to test."
 ],
 "agent_prompt": "Using the security-audit skill from github.com/cloudflare/security-audit-skill, find security vulnerabilities in <path-in-repo>. Expect guidance mode, not full audit artifacts. Verify that each point cites a specific file or function from the path.",
 "agents": [
  "any"
 ],
 "difficulty": "Beginner",
 "time": "15 minutes",
 "basis": "readme",
 "caveat": "The README describes this mode as guidance, so do not treat its output as a complete audit or as proof that a path is safe.",
 "category": "Security and science",
 "tags": [
  "Security and science"
 ],
 "lang": "javascript",
 "requirements": [
  "A coding agent with a model that supports tool use and parallel sub-agents",
  "Node.js, for the zero-dependency findings and coverage-ledger validators",
  "An OS-enforced sandbox if the audit must run target-controlled builds, tests, or fixtures; without it, the workflow keeps leads as needs_validation instead of executing target code",
  "The skill installed with the Skills CLI (npx skills add)"
 ],
 "risk": "dual-use",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [],
 "best": false,
 "score": 0.9,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/cloudflare-security-audit-skill/focused-vulnerability-check-of-a-module/",
 "md": "https://dedupedai.com/use-cases/cloudflare-security-audit-skill/focused-vulnerability-check-of-a-module/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/cloudflare-security-audit-skill--focused-vulnerability-check-of-a-module.json",
 "api_version": "v1"
}