Issues

• Deployment controls named in reconnaissance can skip the coverage ledger

  cloudflare/security-audit-skill#130 · Filter by author ornemeolans opened on Nov 2, 2026
  2

• No fail-closed isolation check: an agent following the scratch-local HOME requirement wiped the real user profile

  cloudflare/security-audit-skill#128 · Filter by author ChoYugyeong opened on Nov 1, 2026
  2

• Coverage ledger accepts ordinary classes absent from their hunter assignments

  cloudflare/security-audit-skill#126 · Filter by author maqalaqil opened on Oct 31, 2026

• Coverage critic JSON cannot carry the source-backed reasons required by its parent

  cloudflare/security-audit-skill#124 · Filter by author maqalaqil opened on Oct 31, 2026

• 보안

  cloudflare/security-audit-skill#122 · Filter by author x11984 opened on Oct 30, 2026

• Reference files are only reachable through other reference files

  cloudflare/security-audit-skill#119 · Filter by author NIAF-DW opened on Oct 28, 2026

• feat(codex): plugin

  cloudflare/security-audit-skill#118 · Filter by author rbalet opened on Oct 28, 2026
  1

• Validators are non-functional on Windows — readFileWithinLimit() rejects every input because O_NOFOLLOW/O_NONBLOCK are unavailable

  cloudflare/security-audit-skill#117 · Filter by author WakeUpMrAnderson opened on Oct 27, 2026

• Security Audit

  cloudflare/security-audit-skill#115 · Filter by author princekvincent opened on Oct 27, 2026

• 65 open PRs, 0 merged in 42 days: #63 and #97 are mutually exclusive, and 77 PR pairs conflict

  cloudflare/security-audit-skill#114 · Filter by author wernersmit opened on Oct 27, 2026
  2

• Independent AI-assisted report on cloudflare/security-audit-skill

  cloudflare/security-audit-skill#112 · Filter by author weixiongf opened on Oct 26, 2026
  1

• Asymmetric parser hardening: validate-findings.cjs lacks pre-parse and in-memory objectFields limits, exposing parent workflow to key-amplification DoS

  cloudflare/security-audit-skill#107 · Filter by author Inkesk-Dozing opened on Oct 25, 2026
  2

• Keep

  cloudflare/security-audit-skill#98 · Filter by author keoun6183-bot opened on Oct 24, 2026

• Target-controlled repo name drives output path and prior-run reuse (path escape, cross-target prior-run poisoning)

  cloudflare/security-audit-skill#94 · Filter by author bodapatisaikrishna opened on Oct 23, 2026
  2

• Remediation should prove the legitimate use still works, not only that the attack fails

  cloudflare/security-audit-skill#88 · Filter by author miikkij opened on Oct 21, 2026
  3

• Add CWE, optional CVSS, and references to findings

  cloudflare/security-audit-skill#86 · Filter by author rhyw opened on Oct 21, 2026
  1

• validate-coverage-ledger.cjs rejects artifact sharing within a single attempt

  cloudflare/security-audit-skill#81 · Filter by author Tim-Utelogy opened on Oct 20, 2026
  1

• Completion gate and carried-record handling contradict the phase rules

  cloudflare/security-audit-skill#80 · Filter by author Tim-Utelogy opened on Oct 20, 2026
  2

• A never-returned hunter assignment is a dead-end state, and 'complete' does not require the ledger to be free of in_progress/blocked units

  cloudflare/security-audit-skill#79 · Filter by author rahul05ranjan opened on Oct 15, 2026

• run-metadata.json run-state contract is never validated; run_status semantics undefined for partial-by-design runs

  cloudflare/security-audit-skill#78 · Filter by author rahul05ranjan opened on Oct 15, 2026

• Sol 6.1 prevents the output and asks me to signup for Daybreak

  cloudflare/security-audit-skill#77 · Filter by author MubashirullahD opened on Oct 13, 2026
  4

• Model a validation blocker once: shared_blockers in the report schema, referenced from needs_validation records

  cloudflare/security-audit-skill#73 · Filter by author Kite-888 opened on Oct 11, 2026

• Skill

  cloudflare/security-audit-skill#72 · Filter by author marjoriebenites-source opened on Oct 8, 2026

• git clone https://github.com/farhmandakbar26/dotnet-codespaces

  cloudflare/security-audit-skill#71 · Filter by author farahmandakbar26 opened on Oct 7, 2026
  2

• Fail to install on Claude Code

  cloudflare/security-audit-skill#64 · Filter by author renatoyamane opened on Oct 1, 2026