#1
Unified Policy as Code
7.8K starsJun 8, 2026 pushsecurityGoCompliance
$ npx skills add kyverno/kyvernoAlternatives
Opa alternatives for AI agents.
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
100
Quality
100
Trust
12K
Stars
#2
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
16K starsJun 12, 2026 pushsecurityC++Compliance
$ npx skills add wazuh/wazuh#3
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
16K starsMay 11, 2026 pushsecurityShellCompliance
$ npx skills add CISOfy/lynis#4
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
12K starsJun 5, 2026 pushsecurityGoSecurity
$ npx skills add future-architect/vuls#5
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
6.0K starsJun 10, 2026 pushsecurityPythonCompliance
$ npx skills add cloud-custodian/cloud-custodian#6
Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.
3.1K starsMay 20, 2026 pushsecurityGoSecurity
$ npx skills add zegl/kube-score#7
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
2.7K starsJun 8, 2026 pushsecurityGoSAST
$ npx skills add Bearer/bearer#8
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
15K starsJun 12, 2026 pushsecurityOCamlSAST
$ npx skills add semgrep/semgrep#9
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
29K starsJun 4, 2026 pushsecurityGoSecurity
$ npx skills add projectdiscovery/nuclei#10
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
33K starsJun 11, 2026 pushsecurityPythonOSINT
$ npx skills add soxoj/maigret#11
The ZAP by Checkmarx Core project
15K starsJun 4, 2026 pushsecurityJavaSecurity
$ npx skills add zaproxy/zaproxy#12
Incredibly fast crawler designed for OSINT.
13K starsFeb 10, 2026 pushsecurityPythonOSINT
$ npx skills add s0md3v/Photon#13
Download pictures (or videos) along with their captions and other metadata from Instagram.
13K starsApr 15, 2026 pushsecurityPythonOSINT
$ npx skills add instaloader/instaloader#14
Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.
10K starsMay 20, 2026 pushsecurityJavaScriptOSINT
$ npx skills add calesthio/Crucix#15
The recursive internet scanner for hackers. 🧡
9.9K starsJun 12, 2026 pushsecurityPythonOSINT
$ npx skills add blacklanternsecurity/bbot#16
OneForAll是一款功能强大的子域收集工具
9.8K starsMay 11, 2026 pushsecurityPythonOSINT
$ npx skills add shmilylty/OneForAllHow to choose
When should you switch?
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Opa if it already passes your workflow test and repository review.
Next step
Compare top candidates side by side
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.