Alternatives
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
$ npx skills add OWASP/mastgAn artifact of fully-specified annotations to power static-analysis checks, beginning with nullness analysis.
$ npx skills add jspecify/jspecifyA static analyzer for Java, C, C++, and Objective-C
$ npx skills add facebook/inferA tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
$ npx skills add uber/NullAway🚀Optimizer for mobile applications
$ npx skills add didi/boosterAn easy-to-learn/use static analysis framework for Java and Android
$ npx skills add pascal-lab/Tai-eHorusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
$ npx skills add ZupIT/horusecAppshark is a static taint analysis platform to scan vulnerabilities in an Android app.
$ npx skills add bytedance/appsharkLightweight static analysis for many languages. Find bug variants with patterns that look like source code.
$ npx skills add semgrep/semgrepA Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
$ npx skills add Konloch/bytecode-viewer⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
$ npx skills add ast-grep/ast-grepCheckstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
$ npx skills add checkstyle/checkstyleT.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.
$ npx skills add wala/WALAContinuous Inspection
$ npx skills add SonarSource/sonarqubeThe modern Java bytecode editor
$ npx skills add Col-E/RecafCatch common Java mistakes as compile-time errors
$ npx skills add google/error-proneHow to choose
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Mobsfscan if it already passes your workflow test and repository review.
Next step
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.