{ "schema_version": 1, "generated": "2026-10-23", "id": "cloudflare-security-audit-skill--validate-audit-records-before-sharing", "repo": "cloudflare/security-audit-skill", "repo_url": "https://github.com/cloudflare/security-audit-skill", "repo_slug": "cloudflare-security-audit-skill", "title": "Check audit records against the schema and ledger rules", "page_title": "How to check audit records against the schema and ledger rules with Security Audit Skill", "summary": "Run the bundled validators on findings and coverage files before you share results.", "who": "A security team lead or CI owner who receives audit output from an agent and must confirm it meets the expected structure.", "problem": "Structured audit output can be malformed or incomplete, and reports built on it are unreliable.", "outcome": "Confirmation that findings.json matches report-schema.json and coverage-ledger.json passes its validator, so the records are safe to share.", "steps": [ "Clone or download the repository at github.com/cloudflare/security-audit-skill.", "Run `node validate-findings.cjs` against your findings.json, following the script's usage message. (inferred, check the README)", "Run `node validate-coverage-ledger.cjs` against your coverage-ledger.json. (inferred, check the README)", "Fix any reported errors and rerun both validators until they pass.", "Share only the validated records with reviewers." ], "agent_prompt": "Using the validators in github.com/cloudflare/security-audit-skill, check /findings.json against report-schema.json and /coverage-ledger.json. Report any validation errors. Verify that the validators exit cleanly before the records are shared.", "agents": [ "any" ], "difficulty": "Advanced", "time": "30 minutes", "basis": "readme", "caveat": "The README names the validator files but does not show their command-line usage, so confirm the invocation from each script before relying on it.", "category": "Security and science", "tags": [ "Security and science" ], "lang": "javascript", "requirements": [ "A coding agent with a model that supports tool use and parallel sub-agents", "Node.js, for the zero-dependency findings and coverage-ledger validators", "An OS-enforced sandbox if the audit must run target-controlled builds, tests, or fixtures; without it, the workflow keeps leads as needs_validation instead of executing target code", "The skill installed with the Skills CLI (npx skills add)" ], "risk": "dual-use", "seen_in_the_wild": false, "mentioned_publicly": false, "risks": [], "best": false, "score": 0.7, "evidence": [], "url": "https://dedupedai.com/use-cases/cloudflare-security-audit-skill/validate-audit-records-before-sharing/", "md": "https://dedupedai.com/use-cases/cloudflare-security-audit-skill/validate-audit-records-before-sharing/index.md", "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.", "api": "https://dedupedai.com/api/v1/usecases/cloudflare-security-audit-skill--validate-audit-records-before-sharing.json", "api_version": "v1" }