Cloudflare's vuln hunter started as this one skill. https://github.com/cloudflare/security-a… Point your coding agent at any repo: it maps the attack surface, hunts for bugs, and has a fresh agent try to disprove every finding.