Self-hosted alternatives to security-audit
5 self-hosted AI Skills apps to use instead, best rated first.
Top picks
- C

claude-to-deerflow
Getclaude-to-deerflow is an agent skill that lets an assistant send messages and questions to a running DeerFlow instance through its HTTP API. DeerFlow is an AI agent platform built on LangGraph that orchestrates sub-agents for research, code
Self-hosted
- O

open-notebook
Getopen-notebook is an agent skill for organising research with Open Notebook, a self-hosted alternative to NotebookLM. It arranges sources, notes and AI conversations into research notebooks. Sources can be PDFs, web pages, audio, video and O
Self-hosted
- R

Reactive Resume
GetReactive Resume is a free and open-source resume builder for writing resumes and cover letters, checking the work, and tracking job applications. You create a free account, import an existing resume or start from scratch, and see the finish
Open sourceSelf-hosted
- S

self-hosted-funnel-launch
GetSelf-hosted funnel launch is an agent skill that takes a funnel from an empty install to published on infrastructure you control, using the Autonnel funnel builder, which is licensed Apache-2.0. The result covers a landing page, checkout, a
Self-hosted
- G

get-convex/convex-backend
GetConvex is an open-source reactive database for web app developers. It combines a database, a place to write server functions in pure TypeScript, and client libraries that keep the app's data live, so screens update as the data changes. Beca
Self-hosted
About security-audit

security-audit
Security guidance and vulnerability review for codebases, APIs, services
Security-audit is a defensive, source-first agent skill for finding vulnerabilities in codebases, APIs, services, CLI tools, libraries and daemons. It looks for issues that break a real trust boundary and holds each finding to a standard: a candidate is only confirmed when it has a concrete affected principal, resource or security outcome. For each confirmed finding the skill gives the owner the source evidence, a safe way to reproduce the problem, a priority, and the smallest effective fix. It has two modes. By default it works as guidance, so a security question or a focused review uses only the relevant parts and does not write audit files. The full audit mode runs all six phases and writes report artifacts, and it is used when you explicitly ask for an audit or a pen-test of a codebase, or for a full, comprehensive or end-to-end review. If a request could mean either mode, the skill asks one focused question first. It is agent-neutral, and it is published by Cloudflare.
- Price
- Free
- Made by
- cloudflare
- Category
- AI Skills
- Website
- github.com/cloudflare/security-audit-skill/security-audit