This GitHub repo provides a coding-agent skill that runs automated security audits in six phases—recon, hunting, validation, reporting, structured output, and independent verification—to identify exploitable vulnerabilities. It uses parallel agents to generate and disprove findings, outputs structured JSON conforming to a schema, and independently verifies each claim against the source code. Each run reads prior findings to skip known issues and improve coverage.

• Cloudflare open-sourced the actual skill behind their own vulnerability discovery harness, structured as six phases: recon, hunting, validation, reporting, structured output, and independent verification.
• Findings are adversarially checked—the agent that finds a bug never validates it, and separate fresh agents re-verify each claim against the source code before reporting.
• A single audit pass only catches about half of total vulnerabilities, so the tool reads prior findings.json runs to skip known issues and improve coverage over repeated runs.
• Output is enforced as machine-readable JSON validated against a schema via a zero-dependency Node.js script, alongside human-readable REPORT.md and FINDINGS-DETAIL.md files.

Cloudflare’s teams quickly reviewed CVE-2026-31431 (“Copy Fail”), confirmed their behavioral detections flagged the exploit within minutes, and found no signs of in-the-wild abuse. They ran fleet-wide threat hunts, deployed a bpf-lsm mitigation, and rolled out updated kernels without impacting services or customer data.

• Cloudflare's anomaly-based behavioral detection caught the "Copy Fail" exploit pattern within minutes, without a CVE-specific rule ever being written.
• A 48-hour log hunt turned up no evidence of pre-disclosure exploitation in the wild.
• Cloudflare patched its fleet across 330 cities with zero downtime or customer data exposure, using weekly kernel builds and rolling reboots.
• The bug itself let an unprivileged process abuse the AF_ALG crypto interface to corrupt cached files (e.g., /usr/bin/su) for root privilege escalation.