Alternatives
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Migrate an existing harness/espalier install to the current Espalier version — auto-detects which of v0.1→v0.2, v0.3→v0.4, v0.4→v0.5, the v0.5.3 coder-agent patch, v0.5→v0.6 (Stage 1 grill), v0.6→v0.7 (read-only /espalier-ask lane), v0.7→v0.8 (requirements approval gate), the v0.8.1 impact-analysis agent patch, the v0.8.2 re-review fixpoint loop, the v0.9.0 security audit, the v0.9.1 configurable escalation caps, the v0.9.2 correctness patch, the v0.9.3 skill-clarity patch, the v0.9.4 security-skill patch, the v0.9.6→v0.10.0 push-gate reshape, the v0.10.0→v0.11.0 hook exit-code release, the v0.11.0→v0.12.0 grill blind-spot pass (Stage 1 rules/wiki cross-check), the v0.12.0→v0.13.0 minimalism release (coder Solution Selection Ladder + reviewer advisory Minimalism Review), the v0.13.0→v0.13.1 polish patch (stage-conditional coding guidance + reviewer step-7 abuse-test duty + code-review gate line), the v0.13.1→v0.13.2 readability release (coder clarity-then-brevity tie-break + comment-co
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
$ npx skills add projectdiscovery/nuclei🕵️♂️ Collect a dossier on a person by username from 3000+ sites
$ npx skills add soxoj/maigretThe ZAP by Checkmarx Core project
$ npx skills add zaproxy/zaproxyWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
$ npx skills add wazuh/wazuhInfisical is the open-source platform for secrets, certificates, and privileged access management.
$ npx skills add Infisical/infisicalAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
$ npx skills add future-architect/vulsOpen Policy Agent (OPA) is an open source, general-purpose policy engine.
$ npx skills add open-policy-agent/opaVulnerability scanner written in Go which uses the data provided by https://osv.dev
$ npx skills add google/osv-scannerOpen-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
$ npx skills add BigBodyCobain/ShadowbrokerWPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
$ npx skills add wpscanteam/wpscanThe recursive internet scanner for hackers. 🧡
$ npx skills add blacklanternsecurity/bbot💡 A hinting engine for the web
$ npx skills add webhintio/hintAI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
$ npx skills add shuvonsec/claude-bug-bountyDesign and implementation guidance for distinctive landing pages, portfolios, product demos, and purposeful redesigns.
$ npx skills add Leonxlnx/taste-skill --skill design-taste-frontendResearch the last 30 days across Reddit, X, YouTube, Hacker News, Polymarket, GitHub, and the web, then synthesize a grounded brief for an AI agent.
$ npx skills add mvanhorn/last30days-skill -gReact and Next.js performance guidance for writing, reviewing, and refactoring production UI code.
$ npx skills add vercel-labs/agent-skills --skill vercel-react-best-practicesHow to choose
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep espalier-migrate if it already passes your workflow test and repository review.
Next step
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.