Security-Audit
Structure code security reviews around reconnaissance, candidate validation, coverage records, and evidence-based reporting, with separate guidance and full-audit modes.
Cloudflare
Explore Cloudflare developer tools and Agent Skills for building Workers applications, stateful agents, and coordinated services. Compare development guidance with security research workflows, and understand how the software, runtime capabilities, and task instructions fit into an application delivery process.
About Cloudflare
Cloudflare develops an Internet platform spanning application delivery, security, networking, and developer services. Its public repositories include runtime software, deployment tooling, protocol implementations, and application frameworks. Its developer tools and Agent resources connect coding tasks to concrete platform capabilities.
Workers SDK supports application development and local testing, while Agents SDK supplies building blocks for stateful AI applications. Companion Skills guide the use of those tools and related services such as Durable Objects. The instructions organize implementation choices; the SDKs, CLI, and hosted platform provide the software and execution environment.
Cloudflare also publishes security-audit, a separate instruction collection for source-based security investigation. It structures evidence gathering and independent checking of candidate findings, rather than certifying that a codebase is safe. The development Skills and security workflow serve different tasks and should be selected according to the work being performed.
Selected Cloudflare Skills
Explore Cloudflare Skills for stateful Agent applications, Durable Objects coordination, Wrangler projects, and code security reviews. Compare the scope of each instruction with your application and development stage to identify the most relevant workflow.
Agents-Sdk
Guide implementation and review of Cloudflare Agents SDK applications, covering state, scheduling, communication, and the current product documentation.
Durable-Objects
Build and review stateful Durable Objects applications, including persistent coordination, RPC, WebSockets, alarms, bindings, and the relevant storage patterns.
Wrangler
Run and troubleshoot Wrangler in projects already using its configuration, covering local development, previews, deployment, and resource management workflows.
Cloudflare Open-Source Projects
Explore Cloudflare developer software for building applications and Agent services. Compare the Workers development toolkit with the Agents SDK, including their roles in local testing, deployment, persistent state, and real-time interaction.
Workers SDK
Develop, test, and deploy Cloudflare Workers with a toolkit that includes Wrangler, project creation utilities, and the Miniflare local simulator.
Agents SDK
Build stateful agents on Cloudflare with persistent state, scheduling, real-time communication, and connections to tools and external services.
More Teams and Creators
Explore projects and Agent Skills from more teams and creators. Compare their technical focus, representative work, and intended tasks to discover resources relevant to your development, collaboration, or research workflow.
Cloudflare FAQ
Is security-audit part of the general Cloudflare Skills repository?
It is published in its own cloudflare/security-audit-skill repository. The broader cloudflare/skills collection focuses on building with Cloudflare products; the security workflow is a separate resource for source-based reviews.
Does a security-audit report establish that an application is safe?
No. Its records distinguish confirmed findings, unresolved candidates, and rejected leads within the work performed. Coverage records and validation evidence help readers assess that work, but do not establish the absence of every vulnerability.
What changes between guidance mode and full audit mode?
Guidance mode addresses a security question or focused investigation. Full audit mode uses the multi-phase workflow and produces the defined report artifacts when a complete audit or those artifacts are explicitly requested.
How is the Agents SDK Skill different from the SDK itself?
The Skill helps an agent find documentation and implement or review an application. The agents software package supplies runtime classes and APIs. The instruction file does not replace the SDK dependency or the platform configuration.
When is the Durable Objects Skill useful?
Use it for applications needing persistent state and coordination, such as rooms, sessions, scheduling, or WebSocket services. It covers implementation and review concerns including RPC methods, alarms, bindings, and storage design.
Should every new Cloudflare project use the Wrangler Skill?
The current instruction targets existing Wrangler configuration or an explicit Wrangler request. It routes new or differently configured projects toward the appropriate Cloudflare CLI guidance, so first inspect the project configuration.
Explore Cloudflare Projects and Skills
Compare the selected Skills and software projects against the task at hand. Understand the roles of instructions, tools, and runtime environments, then plan the development workflow and next step that fit your needs.