Cloudflare's Security Audit Skill on a Local Qwen: 9 Runs, 5 Real Findings, 4 False Alarms Rated High
I ran Cloudflare's security-audit skill with a local Qwen3.6-35B on three of my own repositories, after a calibration on code with two known bugs. It found 5 real issues and missed most of the bugs I already knew about. What it is good for, and where it needs a reviewer.
Read article