Free alternatives to security-audit
50 free AI Skills apps to use instead, best rated first.
Top picks
- B

batch-grill-me
Getbatch-grill-me is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It interviews you relentlessly about a plan until you share an understanding. It maps decisions as a tree and asks every question it can answer now
- W

webapp-testing
GetNative Python Playwright scripts for testing local web applications with server lifecycle management. Includes with_server.py helper to automatically start and manage single or multiple servers before running automation scripts. Supports re
- C

content-research-writer
GetAssists in writing high-quality content by conducting research, adding citations, improving hooks, iterating on outlines, and providing real-time feedback on
- O

openhue
Getopenhue is an agent skill from the OpenClaw project, listed on skills.sh. It lets an agent control Philips Hue lights and scenes through a Hue Bridge with the OpenHue CLI: turn lights on and off, dim rooms, set scenes such as movie mode, an
- I

implement
Getimplement is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It implements work from a spec or tickets: it fetches the ticket, works test-first at agreed seams, runs type checks and tests as it goes, reviews the re
- F

frontend-design
GetDistinctive, production-grade frontend interfaces that reject generic AI aesthetics through intentional design choices. Guides aesthetic direction selection (brutalist, maximalist, retro-futuristic, luxury, organic, etc.) before implementat
More AI Skills apps
About security-audit

security-audit
Security guidance and vulnerability review for codebases, APIs, services
Security-audit is a defensive, source-first agent skill for finding vulnerabilities in codebases, APIs, services, CLI tools, libraries and daemons. It looks for issues that break a real trust boundary and holds each finding to a standard: a candidate is only confirmed when it has a concrete affected principal, resource or security outcome. For each confirmed finding the skill gives the owner the source evidence, a safe way to reproduce the problem, a priority, and the smallest effective fix. It has two modes. By default it works as guidance, so a security question or a focused review uses only the relevant parts and does not write audit files. The full audit mode runs all six phases and writes report artifacts, and it is used when you explicitly ask for an audit or a pen-test of a codebase, or for a full, comprehensive or end-to-end review. If a request could mean either mode, the skill asks one focused question first. It is agent-neutral, and it is published by Cloudflare.
- Price
- Free
- Made by
- cloudflare
- Category
- AI Skills
- Website
- github.com/cloudflare/security-audit-skill/security-audit

