AITOPAI热报
Products

Cloudflare 开源 security-audit-skill，用多个 AI 助手自动做代码安全审计

Gorden Sun@Gorden_Sun
Post
View the post
Why we picked it

Cloudflare 开源的这个 skill 让多个 AI 助手分工做安全审计，还会互相挑刺验证漏洞，写代码的人可以拿来给自己项目免费做一遍安检。

Cloudflare 开源了 security-audit-skill，让 AI 编程助手自动完成安全排查全流程。系统先让一个 AI 助手摸清软件架构，再由多个 AI 分头寻找漏洞候选，随后换一批全新的 AI 专门负责反驳和验证这些漏洞，以减少误报。最终输出机器可读的结构化报告，区分已确认漏洞、待人工核实的存疑点和已排除的假警报。项目代码已在 GitHub 上公开。

Image · Gorden Sun
Original · Gorden Sun

security-audit-skill：给AI编程助手的安全审计外挂

Cloudflare开源了security-audit-skill，AI自动接管安全排查全流程。多个独立的AI助手会分工合作，先摸清软件架构，再分头寻找漏洞候选，接着换一批全新的AI去故意反驳和验证这些漏洞。最终系统会自动输出机器能读懂的结构化报告，清晰标出确认存在的漏洞、需要人工核实的存疑点以及已经排除的安全假警报。

Github：https://t.co/d6isdG8qke

#Cloudflare#security-audit-skill#AI安全#编程助手#开源模型

Keep reading

Recent stories with the same tag or section
ProductsBuildersOfficialSelected02:53
Cloudflare Origin Range Requests cut R2 p99 latency in half

Anyone serving large files through R2 or another origin behind a CDN has likely wrestled with cache rules to keep partial requests from triggering full-file fetches. Cloudflare now handles that coordination at the cache layer, so teams can drop custom range-handling workarounds. The Pingora-based redesign also signals how Cloudflare is evolving its proxy internals.

#Cloudflare#R2#CDN caching#Pingora
Event
官方一手Cloudflare Blog@Matthew Gumport2 sourcesSource