proomt

Search

Search posts, papers, and topics

All posts

Hacker News front pagecloudflare3 min readrelease notesintermediate

Cloudflare/Security-Audit-Skill

Read on github.comHN 209·38 comments

Summary

Cloudflare open‑sources a “security‑audit” skill that turns an LLM‑enabled coding agent into a structured vulnerability auditor. It runs six deterministic phases, validates findings against a JSON schema, and supports additive runs to improve coverage.

  • Six deterministic phases (recon, coverage‑led hunting, validation, structured output, independent verification, neutral reporting) orchestrate isolated sub‑agents.
  • Findings are stored in findings.json with three verdicts (confirmed, needs_validation, rejected) and validated by a zero‑dependency JSON schema.
  • A coverage‑ledger tracks exercised attack classes; validators enforce consistency after each phase.
  • Multiple runs are additive, reusing prior ledgers to target uncovered gaps and re‑validate changed code.

Security engineers and teams using LLM‑powered coding agents should care because it provides a reproducible, auditable framework for automated vulnerability discovery.

6/10
devopsllmsecurityai

Related reading

  2. When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts

    Cloudflare’s Page Shield uses a graph‑neural‑network (GNN) to model JavaScript as a syntax‑tree graph, followed by a lightweight LLM for second‑opinion triage and an ensemble of frontier models for deep analysis. This pipeline caught eight malicious payloads across four distinct affiliate‑theft and backdoor techniques that traditional scanners missed, demonstrating the need for runtime, behavior‑…

    Cloudflarecloudflare.com21 minHN2

  3. Cloudflare Introduces the Agent Development Lifecycle to Replace Traditional SDLC

    Cloudflare’s Agent Development Lifecycle (ADLC) replaces the classic SDLC with an autonomous, event‑driven workflow system that lets AI agents handle code generation, testing, deployment, and maintenance. The platform builds on Cloudflare Workflows and the new @cloudflare/ci library to spin up containers, run headless browsers, and chain steps with caching and credential support. Observability is…

    InfoQinfoq.com2 min

  4. Introducing the DevOps Agent Kit

    The DevOps Agent Kit is an Apache‑2.0 open‑source starter kit that lets you plug an LLM‑based coding assistant into your existing CI/CD, security, and feature‑flag tooling via CloudBees Unify. It ships with seven read‑only example skills, enforces RBAC and audit trails, and normalises data from up to 63 tools so the agent can answer a single “are we good to ship?” question with verifiable evidenc…

    Codeshipcloudbees.com5 min

  5. Best practices for handling cloud reliability incidents

    The article outlines a structured Verify→Investigate→Report→Resolve→Review workflow for GCP reliability incidents and stresses pre‑incident preparation across design, data, playbooks, and training. It lists concrete tools (Cloud Logging, Service Health, Gemini Assist) and reporting steps to help engineers reduce outage impact.

    Google Cloud Bloggoogle.com11 min

  6. Cloudflare Quick Tunnels

    Cloudflare Quick Tunnels let you expose a local service via an outbound‑only connection to Cloudflare’s edge network. The service gets a public URL (anycast across 335+ cities) with automatic TLS, DDoS protection, and no inbound ports. It’s positioned for short‑lived agents, webhooks, and testing loops, with JSON health output and no config files.

    Hacker News front pagecloudflare.com1 minreleaseHN831316