Google's open-source toolkit of agent skills that find, reproduce and patch security vulnerabilities in a codebase, from threat model to verified fix and report.

Cloudflare's open-source skill that turns a coding agent into a security auditor: 6 phases, independent verification, and machine-readable findings.