Cloudflare splits vulnerability hunting into six stages: an open audit skill where hunters, verifiers and records stay separate
Cloudflare has published a coding-agent skill that runs a security audit in six phases: reconnaissance, coverage-led hunting, candidate validation, structured output, independent record verification and target-neutral reporting. It is the single-repo starting point from which Cloudflare's vulnerability discovery harness evolved, requires that the agent checking a finding is never the one that found it, and sorts results into confirmed, needs-validation and rejected records. Repeated runs against the same repository are additive, using prior ledgers to target gaps and revalidate changed source.