Open source alternatives to application-security-testing
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Launchgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Launchopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Launchandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Launchmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Launchod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Launchgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
About application-security-testing
application-security-testing
Application security testing (AppSec) across a whole product with Strix
application-security-testing is an entry-point skill from the Strix project for requests to make an application secure, where the target is not yet a single URL or repository. It picks the right test for each asset, such as source code, a running web app, an API or a CI pipeline, runs them, and produces one ranked plan rather than running everything at maximum depth. Its first step maps the assets: the source, whether it is one repository or several services and which languages it uses, the running environments such as staging, production or a local dev server, the APIs and their schemas, whether two test accounts in different tenants are available, and the constraints on the job, such as out-of-scope paths and the time and budget limits. The skill is firm that testing is done only on assets you own or are authorized to test, and it asks for that confirmation before the first run. It prefers staging over production because the agents send exploit payloads and can change data. If there is no staging environment and production is off limits, the skill says a code-only review is still useful but cannot prove that anything is exploitable on a live app. It passes Gen Agent Trust Hub and Snyk on skills.sh, and Socket shows a warning. It has about 10,000 installs. Install it with npx skills add https://github.com/usestrix/strix --skill application-security-testing.
- Price
- Free
- Made by
- usestrix
- Category
- AI Skills
- Website
- github.com/usestrix/strix/application-security-testing