Scanners-Box 每日 AI 工具推荐 Scanners-Box Daily AI Tool Picks
自主漏洞发现与修复技能 Autonomous Vulnerability Discovery and Remediation Skills
共 1 个工具 · 专栏每天 14:00（北京）更新一期 1 tools · one new issue daily at 14:00 GMT+8
Cloudflare security-audit-skill
Cloudflare security-audit-skill
第 017 期 · 2026.10.7
No. 17 · Oct 7, 2026
第 017 期 · 2026.10.7
No. 17 · Oct 7, 2026
Cloudflare 官方的 coding-agent skill：6 阶段编排，查 findings 的 agent 永远不是发现它的那个 agent Cloudflare's official coding-agent skill: a six-phase orchestration where the agent verifying a finding is never the agent that found it
侦察 → 覆盖驱动狩猎 → 候选验证 → 结构化输出 → 独立记录验证 → 中立报告；官方自己写进 README「单次运行只找到重复运行能找到的漏洞的一半」。短板：22.6k star 只有 14 次提交、MIT 但维护节奏存疑、效果强依赖宿主 agent 的模型与权限。
Recon → coverage-driven hunting → candidate validation → structured output → independent record verification → neutral reporting; the README itself states a single run finds only half of what repeated runs find. Caveats: 22.6k stars on just 14 commits, MIT but an uncertain maintenance cadence, and effectiveness depends heavily on the host agent's model and permissions.
https://github.com/cloudflare/security-audit-skill