Self-hosted alternatives to security-audit
5 self-hosted AI Skills apps to use instead, best rated first.
Top picks
- C

claude-to-deerflow
Launchclaude-to-deerflow is an agent skill that lets an assistant send messages and questions to a running DeerFlow instance through its HTTP API. DeerFlow is an AI agent platform built on LangGraph that orchestrates sub-agents for research, code
Self-hosted
- O

open-notebook
Launchopen-notebook is an agent skill for organising research with Open Notebook, a self-hosted alternative to NotebookLM. It arranges sources, notes and AI conversations into research notebooks. Sources can be PDFs, web pages, audio, video and O
Self-hosted
- R

Reactive Resume
LaunchReactive Resume is a free and open-source resume builder for writing resumes and cover letters, checking the work, and tracking job applications. You create a free account, import an existing resume or start from scratch, and see the finish
Open sourceSelf-hosted
- S

self-hosted-funnel-launch
LaunchSelf-hosted funnel launch is an agent skill that takes a funnel from an empty install to published on infrastructure you control, using the Autonnel funnel builder, which is licensed Apache-2.0. The result covers a landing page, checkout, a
Self-hosted
- G

get-convex/convex-backend
LaunchConvex is an open-source reactive database for web app developers. It combines a database, a place to write server functions in pure TypeScript, and client libraries that keep the app's data live, so screens update as the data changes. Beca
Self-hosted
About security-audit

security-audit
Comprehensive security scanning and vulnerability detection
security-audit is an agent skill from the ruflo project for scanning code for security problems and vulnerabilities. It covers input validation, prevention of path traversal, detection of known CVEs, and enforcement of secure coding patterns. The skill says when it should run: when code implements authentication or authorization, handles payment processing or user data, creates an API endpoint, handles file uploads, runs database queries, or calls an external API. Those are the places where a mistake is most costly, so the skill is meant to be used as a review step on changes that touch them. It is for developers who want an assistant to look for common weaknesses before a change is merged, and for teams that want a repeatable checklist for sensitive areas. A scanner like this is a review aid and does not prove that code is secure, so it should be used alongside the team's own review and any dedicated security tools. Be careful to run it on code you are allowed to test and to share its findings only with the people who need them. The skill passes Socket and Snyk on skills.sh, and Gen Agent Trust Hub shows a warning. It has about 1,400 installs. Install it with npx skills add https://github.com/ruvnet/ruflo --skill security-audit.
- Price
- Free
- Made by
- ruvnet
- Category
- AI Skills
- Website
- github.com/ruvnet/ruflo/security-audit