Open source alternatives to security-audit
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Launchgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Launchopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Launchandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Launchmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Launchod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Launchgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
About security-audit
security-audit
Comprehensive security scanning and vulnerability detection
security-audit is an agent skill from the ruflo project for scanning code for security problems and vulnerabilities. It covers input validation, prevention of path traversal, detection of known CVEs, and enforcement of secure coding patterns. The skill says when it should run: when code implements authentication or authorization, handles payment processing or user data, creates an API endpoint, handles file uploads, runs database queries, or calls an external API. Those are the places where a mistake is most costly, so the skill is meant to be used as a review step on changes that touch them. It is for developers who want an assistant to look for common weaknesses before a change is merged, and for teams that want a repeatable checklist for sensitive areas. A scanner like this is a review aid and does not prove that code is secure, so it should be used alongside the team's own review and any dedicated security tools. Be careful to run it on code you are allowed to test and to share its findings only with the people who need them. The skill passes Socket and Snyk on skills.sh, and Gen Agent Trust Hub shows a warning. It has about 1,400 installs. Install it with npx skills add https://github.com/ruvnet/ruflo --skill security-audit.
- Price
- Free
- Made by
- ruvnet
- Category
- AI Skills
- Website
- github.com/ruvnet/ruflo/security-audit