Skip to content
security-audit

Self-hosted alternatives to security-audit

5 self-hosted AI Skills apps to use instead, best rated first.

Top picks

  1. C

    claude-to-deerflow

    Get

    claude-to-deerflow is an agent skill that lets an assistant send messages and questions to a running DeerFlow instance through its HTTP API. DeerFlow is an AI agent platform built on LangGraph that orchestrates sub-agents for research, code

    Self-hosted

  2. O

    open-notebook

    Get

    open-notebook is an agent skill for organising research with Open Notebook, a self-hosted alternative to NotebookLM. It arranges sources, notes and AI conversations into research notebooks. Sources can be PDFs, web pages, audio, video and O

    Self-hosted

  3. R

    Reactive Resume

    Get

    Reactive Resume is a free and open-source resume builder for writing resumes and cover letters, checking the work, and tracking job applications. You create a free account, import an existing resume or start from scratch, and see the finish

    Open sourceSelf-hosted

  4. S

    self-hosted-funnel-launch

    Get

    Self-hosted funnel launch is an agent skill that takes a funnel from an empty install to published on infrastructure you control, using the Autonnel funnel builder, which is licensed Apache-2.0. The result covers a landing page, checkout, a

    Self-hosted

  5. G

    get-convex/convex-backend

    Get

    Convex is an open-source reactive database for web app developers. It combines a database, a place to write server functions in pure TypeScript, and client libraries that keep the app's data live, so screens update as the data changes. Beca

    Self-hosted

About security-audit

S

security-audit

Security guidance and vulnerability review for codebases, APIs, services

Security-audit is a defensive, source-first agent skill for finding vulnerabilities in codebases, APIs, services, CLI tools, libraries and daemons. It looks for issues that break a real trust boundary and holds each finding to a standard: a candidate is only confirmed when it has a concrete affected principal, resource or security outcome. For each confirmed finding the skill gives the owner the source evidence, a safe way to reproduce the problem, a priority, and the smallest effective fix. It has two modes. By default it works as guidance, so a security question or a focused review uses only the relevant parts and does not write audit files. The full audit mode runs all six phases and writes report artifacts, and it is used when you explicitly ask for an audit or a pen-test of a codebase, or for a full, comprehensive or end-to-end review. If a request could mean either mode, the skill asks one focused question first. It is agent-neutral, and it is published by Cloudflare.

Price
Free
Made by
cloudflare
Category
AI Skills
Website
github.com/cloudflare/security-audit-skill/security-audit