Why it's useful
Point Claude Code or Codex at a project and it works through it phase by phase, checks each finding again before reporting it, and hands back a list you can act on. Useful before you put anything online.
What it needs
A coding agent that can run sub-agents, such as Claude Code or Codex, plus Node.js. The README says to run it in a sandbox with networking switched off. Several agents work at once, so it uses a fair amount of model time.
Image: Cloudflare. Cloudflare Security Audit Skill belongs to Cloudflare; we just think it's worth knowing about.
More tools like this
Open source · MITCoding
Claude Code Router
by musistudio
Runs Claude Code against whichever model you pick, including local and cheaper ones.
Open source · Apache-2.0Coding
claude-code-setup
by Anthropic
Anthropic's official plugin that looks over your project and suggests the Claude Code setup to match.
Open source · Apache-2.0Coding
Cline
by Cline
An open-source coding agent that lives in VS Code, or on the command line.