#1
A vulnerability scanner for container images and filesystems
12K starsJun 12, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add anchore/grypeAlternatives
HuskyCI alternatives for AI agents.
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
HuskyCI
Performing security tests inside your CI
54
Quality
75
Trust
595
Stars
#2
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
9.1K starsJun 18, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add anchore/syft#3
🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint
5.5K starsJun 11, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add mgechev/revive#4
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
1.3K starsMay 24, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add ZupIT/horusec#5
Protect against malicious open source packages 🤖
1.1K starsJun 11, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add safedep/vet#6
Go security checker
8.9K starsJun 15, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add securego/gosec#7
Interactive architecture diagrams for codebases
2.3K starsJun 19, 2026 pushdevelopmentPythonStatic Analysis
$ npx skills add CodeBoarding/CodeBoarding#8
KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
3.5K starsJun 10, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add stackrox/kube-linter#9
Security risk analysis for Kubernetes resources
1.5K starsJun 15, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add controlplaneio/kubesec#10
A tool to enforce Swift style and conventions.
20K starsJun 17, 2026 pushdevelopmentSwiftStatic Analysis
$ npx skills add realm/SwiftLint#11
Program for determining types of files for Windows, Linux and MacOS.
11K starsJun 14, 2026 pushdevelopmentJavaScriptStatic Analysis
$ npx skills add horsicq/Detect-It-Easy#12
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
9.0K starsJun 18, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add checkstyle/checkstyle#13
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
8.8K starsJun 14, 2026 pushdevelopmentPythonStatic Analysis
$ npx skills add bridgecrewio/checkov#14
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
5.9K starsJun 11, 2026 pushdevelopmentPHPStatic Analysis
$ npx skills add vimeo/psalm#15
Static code analysis for Kotlin
7.0K starsJun 19, 2026 pushdevelopmentKotlinStatic Analysis
$ npx skills add detekt/detekt#16
It's not just a linter that annoys you!
5.7K starsJun 9, 2026 pushdevelopmentPythonStatic Analysis
$ npx skills add pylint-dev/pylintHow to choose
When should you switch?
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep HuskyCI if it already passes your workflow test and repository review.
Next step
Compare top candidates side by side
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.