Free download

Let Your Agent Audit Your Code

A free setup guide for Cloudflare's open-source security-audit skill (MIT) in Claude Code. How its six phases work, install, a first run on a small practice app we broke on purpose, what our real test run found (six confirmed findings, three we did not plant), how to run it on your own project, how to read the report, the limits, and the attack-class files as a free checklist. With the practice app, the sample report of our run and a one-page SaaS security checklist.

The download starts right away; the link also comes by email.

Without the newsletter box you get exactly one email with your link; the address is deleted after 7 days.

What is inside
  • How it works Six phases: map the app, hunt per attack class, a fresh agent tries to disprove every finding, then verified reports.
  • Install One Skills CLI command, or copy the folder into .claude/skills by hand.
  • practice/tiny-invoices A 50-line Node.js app with bugs on purpose, to run your first audit on.
  • sample-report/ The real report of our run: six confirmed, one open question, one rejected, with source traces.
  • Reading the report Which file to read first, and in which order to fix.
  • CHECKLIST.md One page of security questions every small SaaS should answer.

Claude Code (or another agent with sub-agents), Node.js and a Git repository you own. A full audit starts many sub-agents and uses a lot of tokens: start small. Only audit your own code, never production systems. Not a penetration test. The guide is in English.

Fabian Faraz Farid · Imprint · Privacy