The security-audit skill ships as a Factory skill #537

Parent

#427

What to build

Cloudflare's security-audit-skill (MIT) becomes the Factory skill thirdshift-security-audit, the one upstream skill that #427's Security run and Security review use.

Adapt it the way Matt Pocock's skills were adapted:

1. Copy it from cloudflare/security-audit-skill at commit c1c8a8c.
2. Change only its frontmatter name, to thirdshift's prefix (ADR 0012).
3. Keep Cloudflare's MIT licence inside the skill's directory.
4. Record the upstream repository and commit beside it.

It's embedded in the binary and linked into worktrees like the other Factory skills (ADR 0001, ADR 0012), so a session on any Harness finds it.

Acceptance criteria

• The skill's files match upstream at c1c8a8c, apart from the frontmatter name.
• Cloudflare's MIT licence, and the upstream repository and commit, are in the skill's directory.
• A worktree has the skill linked for Claude Code and for Codex, as the other Factory skills are, and kept out of git.
• The Prompts and skills page lists the skill and shows its licence, and the generated pages are regenerated.
• The README's credits name Cloudflare's skill and its licence.