Blog & Skills

Notes, opinions, and copy-paste-ready skills.

cloudflare/security-audit-skill: the agent auditor that argues with itself

Cloudflare's open-source skill turns your coding agent into a six-phase security auditor — the verifier that checks each finding is never the agent that found it.

Oct 29, 2026 · 2 min read

snyk agent-scan v0.6 report showing scored MCP server and skill risks

skill · curated

snyk/agent-scan: a security scanner for the MCP servers and skills you've already installed

Snyk's CLI scanner auto-discovers your agent configs, inventories every MCP server and skill, and scores each for prompt injection, credential leaks, and destructive capabilities.

Oct 22, 2026 · 2 min read