#1
A vulnerability scanner for container images and filesystems
12K starsJun 9, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add anchore/grypeAlternatives
CodeBoarding alternatives for AI agents.
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
CodeBoarding
Interactive architecture diagrams for codebases
100
Quality
100
Trust
2.2K
Stars
#2
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
9.1K starsJun 11, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add anchore/syft#3
🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint
5.5K starsJun 11, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add mgechev/revive#4
It's not just a linter that annoys you!
5.7K starsJun 9, 2026 pushdevelopmentPythonStatic Analysis
$ npx skills add pylint-dev/pylint#5
A tool to enforce Swift style and conventions.
20K starsJun 9, 2026 pushdevelopmentSwiftStatic Analysis
$ npx skills add realm/SwiftLint#6
Program for determining types of files for Windows, Linux and MacOS.
11K starsJun 11, 2026 pushdevelopmentJavaScriptStatic Analysis
$ npx skills add horsicq/Detect-It-Easy#7
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
8.9K starsJun 12, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add checkstyle/checkstyle#8
Go security checker
8.9K starsJun 8, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add securego/gosec#9
Static code analysis for Kotlin
7.0K starsJun 12, 2026 pushdevelopmentKotlinStatic Analysis
$ npx skills add detekt/detekt#10
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
5.9K starsJun 11, 2026 pushdevelopmentPHPStatic Analysis
$ npx skills add vimeo/psalm#11
An extensible multilanguage static code analyzer.
5.4K starsJun 12, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add pmd/pmd#12
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
13K starsJun 11, 2026 pushdevelopmentPythonStatic Analysis
$ npx skills add OWASP/mastg#13
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
3.9K starsJun 13, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add spotbugs/spotbugs#14
KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
3.5K starsJun 10, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add stackrox/kube-linter#15
PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. PHPMD can be seen as an user friendly frontend application for the raw metrics stream measured by PHP Depend.
2.4K starsMay 23, 2026 pushdevelopmentPHPStatic Analysis
$ npx skills add phpmd/phpmd#16
Static Analyzer for Solidity and Vyper
6.3K starsJun 11, 2026 pushdevelopmentPythonStatic Analysis
$ npx skills add crytic/slitherHow to choose
When should you switch?
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep CodeBoarding if it already passes your workflow test and repository review.
Next step
Compare top candidates side by side
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.