Charlie HillsFree guide · Claude & Claude Code
Run a free security audit on your app
The install line and exact prompt for Cloudflare's free security audit skill, how to read the report, how to test a lead safely, and what to do when something looks wrong.
Charlie Hills Added 3 November 2026 · Free
What’s inside
- 1The whole run, with timings
- 2How it works
- 31. What you need first
- 42. Paste the install line
- 53. Type the exact prompt
- 64. How to read the report
- 75. Test one lead yourself
The whole run, with timings
|
Step |
Who does it |
How long |
|
Install the skill |
You |
About 1 minute |
|
Type the prompt |
You |
10 seconds |
|
The audit runs |
Claude |
About an hour on a small app (mine took 62.8 minutes) |
|
Read the report |
You and Claude |
About 10 minutes |
|
Test one lead |
Claude, with your yes |
Depends on the lead |
|
Run it again |
Claude |
Another run, aimed at what the first one missed |
Those timings come from one test on a practice app: OWASP NodeGoat, which is built to be insecure and has about 20 server-side files. It used 34 agents. One test isn't an average, so treat the numbers as a rough guide. A bigger app takes longer and uses more of your plan.
That’s the first part. The rest of this guide is free too.
