Open source alternatives to security-audit
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G

github-ops
Getgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O

opensource-pipeline
Getopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A

andrej-karpathy-skills
Getandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M

microsoft/markitdown
Getmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O

od-contribute
Getod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G

github-deep-research
Getgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps

modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context

netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics

Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude

MCP Toolbox for Databases
MCP Toolbox for Databases enables your agent to connect to your database
About security-audit

security-audit
Security guidance and vulnerability review for codebases, APIs, services
Security-audit is a defensive, source-first agent skill for finding vulnerabilities in codebases, APIs, services, CLI tools, libraries and daemons. It looks for issues that break a real trust boundary and holds each finding to a standard: a candidate is only confirmed when it has a concrete affected principal, resource or security outcome. For each confirmed finding the skill gives the owner the source evidence, a safe way to reproduce the problem, a priority, and the smallest effective fix. It has two modes. By default it works as guidance, so a security question or a focused review uses only the relevant parts and does not write audit files. The full audit mode runs all six phases and writes report artifacts, and it is used when you explicitly ask for an audit or a pen-test of a codebase, or for a full, comprehensive or end-to-end review. If a request could mean either mode, the skill asks one focused question first. It is agent-neutral, and it is published by Cloudflare.
- Price
- Free
- Made by
- cloudflare
- Category
- AI Skills
- Website
- github.com/cloudflare/security-audit-skill/security-audit










