Cloudflare open-sources its bug hunter

🔥 What happened Cloudflare open-sourced the security-audit skill that seeded its own vulnerability-discovery harness. It turns a coding agent into a six-phase auditor: recon, coverage-led hunting, candidate validation, structured output, independent verification, and reporting. The repo is the single-repo ancestor of Cloudflare's fleet-wide system. 💡 Why it matters Every finding gets handed to a fresh adversarial verifier — the agent that checks is never the agent that found. That attacks the core failure mode of LLM security scans: hallucinated vulns. Six validators plus a JSON schema force structured evidence, not prose. ⚡ Our take Finally an agent workflow that fights hallucination structurally instead of prompt-pleading it away. If you're still doing manual code review, you're already behind.