Alternatives

Changeme alternatives for AI agents.

Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.

Current skill

Changeme

A default credential scanner.

85
Quality
84
Trust
1.5K
Stars
#1

Bandit

Similarity 147Trust 94Excellent 100

Bandit is a tool designed to find common security issues in Python code.

8.1K starsMay 25, 2026 pushsecurityPythonSecurity
$ npx skills add PyCQA/bandit
#2

Oxo

Similarity 138Trust 86Excellent 85

OXO is a security scanning orchestrator for the modern age.

574 starsJun 12, 2026 pushsecurityPythonSecurity
$ npx skills add Ostorlab/oxo
#3

Doublepulsar Detection Script

Similarity 136Trust 85Strong 70

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

1.0K starsFeb 3, 2020 pushsecurityPythonSecurity
$ npx skills add WithSecureLabs/doublepulsar-detection-script
#4

Artemis

Similarity 136Trust 92Excellent 100

A modular vulnerability scanner with automatic report generation capabilities.

1.2K starsJun 13, 2026 pushsecurityPythonSecurity
$ npx skills add CERT-Polska/Artemis
#5

Caringcaribou

Similarity 132Trust 86Excellent 87

A friendly car security exploration tool for the CAN bus

918 starsJun 12, 2026 pushsecurityPythonSecurity
$ npx skills add CaringCaribou/caringcaribou
#6

Wpscan

Similarity 125Trust 93Excellent 100

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

9.6K starsJun 12, 2026 pushsecurityRubySecurity
$ npx skills add wpscanteam/wpscan
#7

Burpa

Similarity 122Trust 76Needs review 54

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

535 starsAug 1, 2018 pushsecurityPythonSecurity
$ npx skills add 0x4D31/burpa
#8

Evilscan

Similarity 121Trust 81Strong 75

NodeJS Simple Network Scanner

547 starsFeb 28, 2026 pushsecurityJavaScriptSecurity
$ npx skills add eviltik/evilscan
#9

Pakala

Similarity 121Trust 75Needs review 52

Offensive vulnerability scanner for ethereum, and symbolic execution tool for the Ethereum Virtual Machine

343 starsJun 7, 2022 pushsecurityPythonSecurity
$ npx skills add palkeo/pakala
#10

MetaRadar

Similarity 120Trust 91Excellent 93

A tool for BLE environment monitoring. Find and track Bluetooth devices around, and get notified when the target device is detected.

1.4K starsJan 22, 2026 pushsecurityKotlinSecurity
$ npx skills add BLE-Research-Group/MetaRadar
#11

Nuclei

Similarity 120Trust 98Excellent 100

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

29K starsJun 13, 2026 pushsecurityGoSecurity
$ npx skills add projectdiscovery/nuclei
#12

PentestER Fully Automatic Scanner

Similarity 119Trust 69Needs review 47

DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc

375 starsMay 15, 2023 pushsecurityPythonSecurity
$ npx skills add RASSec/pentestER-Fully-automatic-scanner
#13

Web Cache Vulnerability Scanner

Similarity 119Trust 86Excellent 92

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

1.2K starsJan 21, 2026 pushsecurityGoSecurity
$ npx skills add Hackmanit/Web-Cache-Vulnerability-Scanner
#14

Slowhttptest

Similarity 119Trust 88Excellent 86

Application Layer DoS attack simulator

1.6K starsJun 26, 2025 pushsecurityC++Security
$ npx skills add shekyan/slowhttptest
#15

Zaproxy

Similarity 119Trust 95Excellent 100

The ZAP by Checkmarx Core project

15K starsJun 11, 2026 pushsecurityJavaSecurity
$ npx skills add zaproxy/zaproxy
#16

Photon

Similarity 118Trust 92Excellent 100

Incredibly fast crawler designed for OSINT.

13K starsFeb 10, 2026 pushsecurityPythonOSINT
$ npx skills add s0md3v/Photon

How to choose

When should you switch?

Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Changeme if it already passes your workflow test and repository review.

Next step

Compare top candidates side by side

Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.