Security
5 projects tagged Security, in the order of our ranking. Some replace a paid product; others are free tools people use alongside one.
Most often they replace Snyk. 5 of 5 run on your own machine. The most starred is Cloudflare Security Audit Skill, with 57k stars on GitHub.
| Compare | Project | Runs on my machine | Allowed at work | Paid services | Hardware | Setup | Stars |
|---|---|---|---|---|---|---|---|
| Trail of Bits SkillsTrail of Bits' marketplace of 40+ security plugins for Claude Code and Codex, from CodeQL and Semgrep scans to C, Rust and supply-chain audits. | Yes | ConditionsCC-BY-SA-4.0 | Optional only | No graphics card needed | Easy | 8.0k+141 this week | |
| Cloudflare Security Audit SkillCloudflare's coding-agent skill that runs a six-phase security audit of a codebase, with every finding re-checked by a separate agent. | Yes | YesMIT | Optional only | No graphics card needed | Easy | 57k+8,825 this week | |
| SkillSpectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks i… | Yes | YesApache-2.0 | Optional only | Not documented | Medium | 24k | |
| Defending Code Reference HarnessAnthropic's reference Claude Code skills and autonomous pipeline for threat modelling, vulnerability scanning, triage and patching. Not maintained. | Yes | YesApache-2.0 | Required | No graphics card needed | Medium | 7.7k+42 this week | |
| HOL GuardLocal security layer for AI coding agents that reviews shell commands, file access, package installs and MCP tool calls, then allows, blocks or asks you first. | Yes | YesApache-2.0 | None required | No graphics card needed | See details | 1.1k+56 this week |
Tick up to three to compare. “Allowed at work” includes projects with conditions, marked amber. Unknown is never counted as a yes. Stars show attention, not quality.
Know a project we’re missing? Suggest it.