#1
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
12K starsJun 12, 2026 pushsecurityGoSecurity
$ npx skills add future-architect/vulsAlternatives
ScanCannon alternatives for AI agents.
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
ScanCannon
A script for credentials-based attack surface enumeration and general reconnaissance of massive networks
79
Quality
77
Trust
476
Stars
#2
🔥 Professional Penetration Testing Framework v4.0 - Automated subdomain enumeration, vulnerability scanning with Nuclei, port scanning, and comprehensive HTML reports. Features parallel scanning, resume capability, and real-time progress tracking.
529 starsJan 9, 2026 pushsecurityShellSecurity
$ npx skills add ByCh4n/BCHackTool#3
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
16K starsMay 11, 2026 pushsecurityShellSecurity
$ npx skills add CISOfy/lynis#4
An auto-updating list of shodan dorks with info on the amount of results they return!
387 starsJun 16, 2026 pushsecuritySecurityClaude Code
$ npx skills add dootss/shodan-dorks#5
A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer.
365 starsJun 16, 2026 pushsecurityPythonSecurity
$ npx skills add rfc-st/humble#6
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
33K starsJun 11, 2026 pushsecurityPythonOSINT
$ npx skills add soxoj/maigret#7
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
16K starsJun 12, 2026 pushsecurityC++Compliance
$ npx skills add wazuh/wazuh#8
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
29K starsJun 13, 2026 pushsecurityGoSecurity
$ npx skills add projectdiscovery/nuclei#9
Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting
1.4K starsMay 24, 2026 pushsecurityShellSecurity
$ npx skills add rfxn/linux-malware-detect#10
The ZAP by Checkmarx Core project
15K starsJun 11, 2026 pushsecurityJavaSecurity
$ npx skills add zaproxy/zaproxy#11
A default credential scanner.
1.5K starsJul 8, 2025 pushsecurityPythonSecurity
$ npx skills add ztgrace/changeme#12
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
9.6K starsJun 12, 2026 pushsecurityRubySecurity
$ npx skills add wpscanteam/wpscan#13
Bandit is a tool designed to find common security issues in Python code.
8.1K starsMay 25, 2026 pushsecurityPythonSecurity
$ npx skills add PyCQA/bandit#14
A high performance offensive security tool for reconnaissance and vulnerability scanning
3.6K starsApr 21, 2026 pushsecurityPythonSecurity
$ npx skills add evyatarmeged/Raccoon#15
Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.
3.1K starsMay 20, 2026 pushsecurityGoSecurity
$ npx skills add zegl/kube-score#16
Semi-automatic OSINT framework and package manager
2.5K starsMay 15, 2026 pushsecurityRustSecurity
$ npx skills add kpcyrd/sn0intHow to choose
When should you switch?
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep ScanCannon if it already passes your workflow test and repository review.
Next step
Compare top candidates side by side
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.