security-audit is an open-source coding agent skill from Cloudflare’s security team (MIT, about 34K stars) and the starting point of its internal vulnerability-hunting system. Install it in Claude Code or Codex, say “security audit this codebase”, and it runs reconnaissance, hunting, adversarial validation, structured output, independent review and reporting. We tested the install and bundled tests and explain the two modes, three tiers, sandboxing and cost.

Ran out of Claude Code quota and switched to Codex, or moved to another machine, and the AI forgot everything? ai-memory uses hooks to record sessions automatically and curates them into a git-managed Markdown wiki that 20+ coding agents share, with automatic handoff when you switch. MIT-licensed, no API key needed by default. This post covers installation, daily use, privacy limits and tips for non-English projects.

On October 17, DeepSeek updated V4.1 Flash to the 1017 release across the web app, mobile app and API. The model name is still deepseek-flash and the price is unchanged. This FAQ covers the benchmark changes, peak and off-peak pricing, how to send images to the API and its limits, the thinking-mode switch, Claude Code configuration, and whether you can run the open weights at home.