Open source alternatives to find-security-vulnerabilities-in-code
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Getgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Getopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Getandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Getmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Getod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Getgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
MCP Toolbox for Databases
MCP Toolbox for Databases enables your agent to connect to your database
About find-security-vulnerabilities-in-code
find-security-vulnerabilities-in-code
Find security vulnerabilities in a codebase or repository with Strix
find-security-vulnerabilities-in-code is a Strix skill for white-box security review of a codebase or repository. The agents read the source to build a model of the routes, the dangerous sinks and the authorization checks, then attempt real exploitation of what they find. Each finding comes with a proof of concept, so the output is a short list of issues that were shown to work rather than the many potential hits a pattern-matching scanner produces. You can run it on a local working tree, on a GitHub repository by its URL, or on one service inside a monorepo, which is usually better than scanning the whole tree. Examples show the scan mode and a maximum budget per run, with a budget of around 15 to 20 for a typical scan. The skill points to the penetration-testing-with-strix skill for installation, LLM setup and flags, and to the managed cloud path for runs without Docker and without an LLM key. Because a scan spends model budget and reads your code, run it on repositories you own or are authorized to test. It suits teams that want a deeper review of a service than a linter gives, and it is most useful on code that handles authentication, data access and external input. It passes Gen Agent Trust Hub on skills.sh with a warning from Socket and Snyk. It has about 10,200 installs. Install it with npx skills add https://github.com/usestrix/strix --skill find-security-vulnerabilities-in-code.
- Price
- Free
- Made by
- usestrix
- Category
- AI Skills
- Website
- github.com/usestrix/strix/find-security-vulnerabilities-in-code