#1
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
6.4K starsApr 1, 2026 pushdevelopmentPythonCode Review
$ npx skills add lintsinghua/DeepAuditAlternatives
Qodana Action alternatives for AI agents.
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Qodana Action
⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle
82
Quality
85
Trust
304
Stars
#2
AI code reviews grounded in 12 classic engineering books — decay risk diagnostics with book citations, severity labels, and 6 analysis modes including full-sweep auto-fix
1.1K starsJun 13, 2026 pushdevelopmentJavaScriptCode Review
$ npx skills add hyhmrright/brooks-lint#3
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
9.4K starsJun 12, 2026 pushdevelopmentGoCode Review
$ npx skills add reviewdog/reviewdog#4
⚠️ Stop saying "you forgot to …" in code review
5.5K starsApr 13, 2026 pushdevelopmentTypeScriptCode Review
$ npx skills add danger/danger-js#5
📝 Source repository of Qodana Help
403 starsJun 15, 2026 pushdevelopmentCode ReviewClaude Code
$ npx skills add JetBrains/Qodana#6
Catch the slop AI coding agents leave in your code: narrative comments, swallowed exceptions, as-any casts, dead code, oversized functions. 50+ rules across 8 languages (TypeScript, JavaScript, Python, Go, Rust, Ruby, PHP). Sub-second, deterministic, no LLM at runtime. MIT-licensed.
391 starsJun 11, 2026 pushdevelopmentTypeScriptCode Review
$ npx skills add scanaislop/aislop#7
GitHub on steroids
23K starsJun 6, 2024 pushdevelopmentJavaScriptCode Review
$ npx skills add ovity/octotree#8
nodejsscan is a static security code scanner for Node.js applications.
2.6K starsOct 10, 2025 pushdevelopmentCSSCode Review
$ npx skills add ajinabraham/nodejsscan#9
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
21K starsMay 19, 2026 pushdevelopmentJavaScriptStatic Analysis
$ npx skills add MobSF/Mobile-Security-Framework-MobSF#10
The developer platform for on-demand cloud development environments to create software faster and more securely.
14K starsJun 12, 2026 pushdevelopmentTypeScriptCode Review
$ npx skills add gitpod-io/gitpod#11
🚀 PR Agent: The Original Open-Source PR Reviewer. This project It is not the Qodo free tier.
12K starsJun 6, 2026 pushdevelopmentPythonCode Review
$ npx skills add The-PR-Agent/pr-agent#12
Your agent writes bad React. This catches it
13K starsJun 14, 2026 pushdevelopmentTypeScriptCode Review
$ npx skills add millionco/react-doctor#13
Static Code Analysis - 静态代码分析
1.8K starsNov 3, 2025 pushdevelopmentPythonCode Review
$ npx skills add Tencent/CodeAnalysis#14
Annotate and review coding agent plans and code diffs visually, share with your team, send feedback to agents with one click.
6.2K starsJun 14, 2026 pushdevelopmentTypeScriptCode Review
$ npx skills add backnotprop/plannotator#15
Open-source & free — Battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in fine-tuned ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
6.8K starsJun 14, 2026 pushdevelopmentGoCode Review
$ npx skills add alibaba/open-code-review#16
🚫 Stop saying "you forgot to …" in code review (in Ruby)
5.7K starsJun 11, 2026 pushdevelopmentRubyCode Review
$ npx skills add danger/dangerHow to choose
When should you switch?
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Qodana Action if it already passes your workflow test and repository review.
Next step
Compare top candidates side by side
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.