Cloudflare open-sourced the security audit skill that seeded its own vulnerability hunting harness. Your coding agent can now run it on your code.
How it works, in 6 phases:
→ maps your codebase
→ hunts for bugs area by area so nothing gets skipped
→ sends every finding to a fresh agent that didn't find it, to confirm it's real
→ writes structured results
→ verifies each record again, independently
→ writes the final report
You get a findings file split into confirmed, needs validation and rejected, so you fix the real problems first.
Install:
npx skills add https://t.co/ptOfJggqQB --skill security-audit
Then open your agent in your project and type: "security audit this codebase"
MIT licensed, 31.3K stars.
MiniMax M3.1 Flash: Space Performance + Bunny Speed
🚀🐰 Yes, Space Bunny - which has topped global leaderboards with 200T+ tokens - was an earlier version of M3.1 Flash.
💰Redefining the performance economics of agentic AI. M3.1 Flash achieves frontier-level intelligence across key tasks such as Cowork (Automation-Bench: 62%; ALE: 30%), Coding (DeepSWE: 74%) and Visual Reasoning (BabyVision: 91%), at 1/3 the cost of M3 and 3x the speed.
API pricing (flat rate): $0.15 / $0.60 per 1M input/output tokens, with cache reads at $0.015 / 1M tokens.
Model weights will arrive on Oct 23.
API: https://t.co/fHRdSV73Hr
M Plan: https://t.co/XfJWSyauda
MiniMax Code for desktop: https://t.co/SGmLTI2HQm
Stationary Strings Theorem X: Tokamak H-Mode and ELM Suppression, Runaway Electron-Positron Avalanche Quench, and the 30-Decade Universal Vortex-String Scaling Law https://t.co/A9nxsyxwCe
Stationary Strings Theorem V: Arrest of the September 2026 Navier-Stokes Vortex Singularity by Elastic String Tension, X to 0 Axis Regularization and Self-Consistent Saturation Proof https://t.co/D8B7PvfvXv
Stationary Strings Theorem III: The Two-Dimensional Duality of Matter, Vortex Singularity and Phase Separation into Information https://t.co/ttTamB3m1B
I'm attending All Day AI on October 22. Join me!
Free, all-day community event. 122 speakers from leading AI companies. 30-minute sessions across 4 stages, 6am–9pm ET. No vendor pitches—drop in for the sessions that interest you. https://t.co/zrFN9WODx2