Setup This New Security Skill Before It's Too Late

So, Cloudflare just launched a new open-source security skill and they use it on their own software factory. And to be honest, it's just in time. Hacking has become so much easier now with AI models and reverse engineering. In the last couple of days alone, we've had some serious breaches and it feels like

it's just speeding up. So, the timing couldn't be any better for Cloudflare's security skills. So, I built an app with six security holes in it on purpose. So, I did this basically to test out Cloudflare's new open-source skill and then I put it up against some free scanners, a security review prompt that's already inside Cloud Code, and

then a plain prompt with no skill at all. I'm Rob from Suite Dimension and by the end of this, you'll know what each of these is good for and I'll give you three different levels of security you can set up to protect yourself this week. So, why does all this matter now? We're all using AI agents to code and

they are pretty good at the textbook stuff. Ask Cloud Code for a search endpoint and it's going to troll some parameters on a query. Where they tend to fall down and get a little bit lazy is the question of whose data is this actually. The agent will check that you're logged in, but will forget to

check that the actual record belongs to you, simple row-level security. So, last year a researcher found more than 170 apps built with Lovable that were all leaking data because nobody had set up the database rules that say who can see which rows. To be fair to Lovable in that scenario, they say it's down to

each customer who owns their apps to manage the security and that is absolutely true. Security is your problem, your responsibility, it's not the tool, it's not the agent. So, going into this test, my prediction would be that the traditional scanners would catch the classic bugs and then you'd need something that was able to read