#1
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
12K starsJun 12, 2026 pushsecurityGoCompliance
$ npx skills add open-policy-agent/opaAlternatives
Aws Control Tower Controls Terraform alternatives for AI agents.
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Aws Control Tower Controls Terraform
This repository describes how to use AWS Control Tower controls, HashiCorp Terraform, and infrastructure as code (IaC) to implement and administer preventive, detective, and proactive security controls. A control (also known as a guardrail) is a high-level rule that provides ongoing governance for your overall AWS Control Tower environment.
47
Quality
74
Trust
109
Stars
#2
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
16K starsJul 24, 2026 pushsecurityC++Compliance
$ npx skills add wazuh/wazuh#3
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
29K starsJun 13, 2026 pushsecurityGoSecurity
$ npx skills add projectdiscovery/nuclei#4
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
33K starsJun 11, 2026 pushsecurityPythonOSINT
$ npx skills add soxoj/maigret#5
Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
11K starsOct 10, 2026 pushsecurityPythonOSINT
$ npx skills add BigBodyCobain/Shadowbroker#6
The ZAP by Checkmarx Core project
15K starsJun 11, 2026 pushsecurityJavaSecurity
$ npx skills add zaproxy/zaproxy#7
Infisical is the open-source platform for secrets, certificates, and privileged access management.
27K starsJun 20, 2026 pushsecurityTypeScriptSecurity
$ npx skills add Infisical/infisical#8
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
12K starsJun 12, 2026 pushsecurityGoSecurity
$ npx skills add future-architect/vuls#9
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
11K starsJun 20, 2026 pushsecurityGoSecurity
$ npx skills add google/osv-scanner#10
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
9.7K starsJul 23, 2026 pushsecurityRubySecurity
$ npx skills add wpscanteam/wpscan#11
The recursive internet scanner for hackers. 🧡
9.9K starsJun 12, 2026 pushsecurityPythonOSINT
$ npx skills add blacklanternsecurity/bbot#12
💡 A hinting engine for the web
3.7K starsJul 21, 2026 pushsecurityTypeScriptSecurity
$ npx skills add webhintio/hint#13
AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
3.5K starsJun 18, 2026 pushsecurityPythonSecurity
$ npx skills add shuvonsec/claude-bug-bounty#14
The Cloud Native Control Plane
12K starsJun 16, 2026 pushdevopsGoKubernetes
$ npx skills add crossplane/crossplane#15
🕵️♂️ All-in-one OSINT tool for analysing any website
34K starsJun 15, 2026 pushlegal-complianceTypeScriptPrivacy
$ npx skills add lissy93/web-check#16
Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
49K starsJun 16, 2026 pushdevopsGoTerraform
$ npx skills add hashicorp/terraformHow to choose
When should you switch?
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Aws Control Tower Controls Terraform if it already passes your workflow test and repository review.
Next step
Compare top candidates side by side
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.