Cloudflare's FREE Security Skill Hit 22,187 Stars

Cloudflare's security-audit-skill repo hit 22,187 stars 3 months after its June 18, 2026 launch. It turns any coding agent with tool use and parallel sub-agents into a 6-phase auditor: recon, coverage-led hunting, adversarial validation, structured findings.json output, independent re-verification, and target-neutral reporting. Install it free with npx skills add, but every audit still spends your own agent's API credits, not Cloudflare's. This video covers the exact commands, the 3 verdict types (confirmed, needs_validation, rejected), and how Cloudflare's own internal numbers compare to what you get for free. Chapters: 00:00 The stars, dated 01:07 What it actually is 02:13 The free catch 03:05 The six-phase pipeline 04:07 Three verdicts, one rule 05:20 The hard limit, stated by the README itself 06:29 What this scales to (not what you get for free) 07:53 Run it yourself Source / further reading: https://github.com/cloudflare/securit...