Alternatives

Brakeman alternatives for AI agents.

Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.

Compare shortlistView Brakeman

Current skill

Brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

100
Quality
100
Trust
7.2K
Stars
#1

Gosec

Similarity 126Trust 100Excellent 100

Go security checker

8.9K starsJun 3, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add securego/gosec
#2

Zizmor

Similarity 126Trust 100Excellent 100

Static analysis for GitHub Actions

5.5K starsJun 5, 2026 pushdevelopmentRustStatic Analysis
$ npx skills add zizmorcore/zizmor
#3

Reek

Similarity 123Trust 100Excellent 100

Code smell detector for Ruby

4.1K starsJun 5, 2026 pushdevelopmentRubyStatic Analysis
$ npx skills add troessner/reek
#4

I18n Tasks

Similarity 122Trust 100Excellent 100

Manage translation and localization with static analysis, for Ruby i18n

2.2K starsMay 30, 2026 pushdevelopmentRubyStatic Analysis
$ npx skills add glebm/i18n-tasks
#5

Semgrep

Similarity 119Trust 100Excellent 100

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

15K starsJun 10, 2026 pushdevelopmentOCamlStatic Analysis
$ npx skills add semgrep/semgrep
#6

Clair

Similarity 119Trust 100Excellent 100

Vulnerability Static Analysis for Containers

11K starsJun 4, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add quay/clair
#7

Pyre Check

Similarity 118Trust 100Excellent 100

Performant type-checking for python.

7.2K starsJun 5, 2026 pushdevelopmentOCamlStatic Analysis
$ npx skills add facebook/pyre-check
#8

Tai E

Similarity 116Trust 100Excellent 100

An easy-to-learn/use static analysis framework for Java and Android

1.8K starsJun 9, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add pascal-lab/Tai-e
#9

Kubesec

Similarity 115Trust 100Excellent 97

Security risk analysis for Kubernetes resources

1.5K starsJun 9, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add controlplaneio/kubesec
#10

ImHex

Similarity 113Trust 100Excellent 100

πŸ” A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

54K starsJun 6, 2026 pushdevelopmentC++Static Analysis
$ npx skills add WerWolv/ImHex
#11

Ruff

Similarity 113Trust 100Excellent 100

An extremely fast Python linter and code formatter, written in Rust.

48K starsJun 6, 2026 pushdevelopmentRustStatic Analysis
$ npx skills add astral-sh/ruff
#12

Shellcheck

Similarity 113Trust 100Excellent 100

ShellCheck, a static analysis tool for shell scripts

40K starsMay 16, 2026 pushdevelopmentHaskellStatic Analysis
$ npx skills add koalaman/shellcheck
#13

Mobile Security Framework MobSF

Similarity 112Trust 100Excellent 100

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

21K starsMay 19, 2026 pushdevelopmentJavaScriptStatic Analysis
$ npx skills add MobSF/Mobile-Security-Framework-MobSF
#14

SwiftLint

Similarity 112Trust 100Excellent 100

A tool to enforce Swift style and conventions.

20K starsJun 6, 2026 pushdevelopmentSwiftStatic Analysis
$ npx skills add realm/SwiftLint
#15

Infer

Similarity 111Trust 100Excellent 100

A static analyzer for Java, C, C++, and Objective-C

16K starsJun 6, 2026 pushdevelopmentOCamlStatic Analysis
$ npx skills add facebook/infer
#16

PHP Parser

Similarity 111Trust 100Excellent 99

A PHP parser written in PHP

17K starsFeb 26, 2026 pushdevelopmentPHPStatic Analysis
$ npx skills add nikic/PHP-Parser

How to choose

When should you switch?

Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Brakeman if it already passes your workflow test and repository review.

Next step

Compare top candidates side by side

Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.