The security-audit skill is installable via npx skills add https://github.com/cloudflare/security-audit-skill --skill security-audit.
The skill defines platform-neutral terminology for delegated agents (research vs general sub-agents) and orchestrates isolated agents through reconnaissance, coverage-led hunting, validation, structured JSON findings, and independent verification.
Socket Trust Hub: Pass. Snyk: Pass. First seen June 18, 2026.