#1
The ZAP by Checkmarx Core project
15K starsJun 11, 2026 pushsecurityJavaSecurity
$ npx skills add zaproxy/zaproxyAlternatives
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Security operations toolkit for AI coding agents. Give Claude Code 25+ skills to catch vulnerabilities, scan containers, detect secrets, and enforce policies automatically.
The ZAP by Checkmarx Core project
$ npx skills add zaproxy/zaproxyAI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
$ npx skills add shuvonsec/claude-bug-bountyNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
$ npx skills add projectdiscovery/nuclei🕵️♂️ Collect a dossier on a person by username from 3000+ sites
$ npx skills add soxoj/maigretOpen-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
$ npx skills add BigBodyCobain/ShadowbrokerThe recursive internet scanner for hackers. 🧡
$ npx skills add blacklanternsecurity/bbotThe agent that grows with you
$ npx skills add NousResearch/hermes-agentLightweight, open-source AI agent for your tools, chats, and workflows.
$ npx skills add HKUDS/nanobotVulnerability scanner written in Go which uses the data provided by https://osv.dev
$ npx skills add google/osv-scannerInfisical is the open-source platform for secrets, certificates, and privileged access management.
$ npx skills add Infisical/infisicalWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
$ npx skills add wazuh/wazuhAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
$ npx skills add future-architect/vulsOpen Policy Agent (OPA) is an open source, general-purpose policy engine.
$ npx skills add open-policy-agent/opaCross-CLI skill for Obsidian: turn your vault into a living AI-first second brain across Claude Code, Codex, Gemini, and OpenCode. 43 commands - now with /obsidian-architect to document your codebase, key-less web research, Google Calendar, and self-rewriting notes.
$ npx skills add eugeniughelbur/obsidian-second-brainWPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
$ npx skills add wpscanteam/wpscan💡 A hinting engine for the web
$ npx skills add webhintio/hintHow to choose
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep SecOpsAgentKit if it already passes your workflow test and repository review.
Next step
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.