http://www.cybersecurityos.net/tags/coding-agents/Recent content in Coding Agents on CybersecurityOSHugoen-usWed, 28 Oct 2026 00:30:38 +0000http://www.cybersecurityos.net/posts/ai-devsecops/cloudflare-vulnerability-harness-security-audit-skill/Wed, 28 Oct 2026 00:00:00 +0000http://www.cybersecurityos.net/posts/ai-devsecops/cloudflare-vulnerability-harness-security-audit-skill/<p>Most of the conversation about AI and vulnerability research is about models. Which one found the most bugs, which one is gated, which one just topped a benchmark. Cloudflare&rsquo;s security team spent a long post on June 18, 2026 arguing that&rsquo;s the wrong thing to focus on. In <a href="https://blog.cloudflare.com/build-your-own-vulnerability-harness/">Build your own vulnerability harness</a>, the point is simple: &ldquo;Our approach centers on the harness, not the model.&rdquo;</p> <p>Then they did something more useful than writing about it. They open-sourced the skill the harness grew out of as <a href="https://github.com/cloudflare/security-audit-skill">cloudflare/security-audit-skill</a>, MIT-licensed, installable in one command. This post covers both: how the harness is structured, what you actually get in the repo, and how I&rsquo;d put it to work.</p>