Skip to content

feat(ai): install Cloudflare security-audit skill - #34

Draft
albttx wants to merge 1 commit into
masterfrom
cursor/security-audit-skill-991c
Draft

albttx wants to merge 1 commit into
masterfrom
cursor/security-audit-skill-991c

Conversation

@albttx

@albttx albttx commented Sep 22, 2026

Copy link
Copy Markdown
Owner

Pin cloudflare/security-audit-skill as a flake input and install it declaratively for Claude, Codex, and OpenCode.

This is upstream content we do not edit, so it is a store symlink rather than a working-tree link under ai/skills/. That keeps the skill read-only (an editor cannot silently replace the symlink) and updates with:

nix flake update security-audit-skill
make switch

The Home Manager links are not gated on modules.ai.linkConfig. The source is a store path, so they never dangle on machines without a clone of this repo.

Wiring

  • Flake input: github:cloudflare/security-audit-skill (locked at c1c8a8c)
  • Overlay copies skills/security-audit into pkgs.security-audit-skill
  • modules/dev/ai/security-audit.nix links that path to:
    • ~/.claude/skills/security-audit
    • ~/.codex/skills/security-audit
    • ~/.config/opencode/skills/security-audit

Verification

  • Built pkgs.security-audit-skill and confirmed SKILL.md plus validate-findings.cjs are present
  • Evaluated a Home Manager config that imports only this module: all three destinations resolve to the same store path
Open in Web Open in Cursor 

Pin github:cloudflare/security-audit-skill as a flake input and link
the store path into Claude, Codex, and OpenCode. This is upstream
content, so a read-only store symlink is the right shape: it cannot
be silently replaced by an editor write, and it updates with
`nix flake update security-audit-skill`.

Co-authored-by: Albert Le Batteux <contact@albttx.tech>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants