#1
A vulnerability scanner for container images and filesystems
13K starsJul 17, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add anchore/grypeAlternatives
Horusec alternatives for AI agents.
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Horusec
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
97
Quality
87
Trust
1.3K
Stars
#2
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
9.1K starsJun 19, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add anchore/syft#3
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
9.0K starsJun 18, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add checkstyle/checkstyle#4
Go security checker
8.9K starsJun 15, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add securego/gosec#5
A tool to enforce Swift style and conventions.
20K starsJun 20, 2026 pushdevelopmentSwiftStatic Analysis
$ npx skills add realm/SwiftLint#6
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
16K starsJun 22, 2026 pushdevelopmentOCamlStatic Analysis
$ npx skills add semgrep/semgrep#7
A static analyzer for Java, C, C++, and Objective-C
16K starsJun 13, 2026 pushdevelopmentOCamlStatic Analysis
$ npx skills add facebook/infer#8
Program for determining types of files for Windows, Linux and MacOS.
11K starsJul 18, 2026 pushdevelopmentJavaScriptStatic Analysis
$ npx skills add horsicq/Detect-It-Easy#9
Continuous Inspection
11K starsJul 17, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add SonarSource/sonarqube#10
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
8.8K starsJun 14, 2026 pushdevelopmentPythonStatic Analysis
$ npx skills add bridgecrewio/checkov#11
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language
9.4K starsJun 12, 2026 pushdevelopmentGoCode Review
$ npx skills add reviewdog/reviewdog#12
Vulnerability Static Analysis for Containers
11K starsJul 17, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add quay/clair#13
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
54K starsJul 27, 2026 pushdevelopmentC++Static Analysis
$ npx skills add WerWolv/ImHex#14
An extremely fast Python linter and code formatter, written in Rust.
48K starsJun 14, 2026 pushdevelopmentRustStatic Analysis
$ npx skills add astral-sh/ruff#15
ShellCheck, a static analysis tool for shell scripts
40K starsJun 11, 2026 pushdevelopmentHaskellStatic Analysis
$ npx skills add koalaman/shellcheck#16
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
21K starsMay 19, 2026 pushdevelopmentJavaScriptStatic Analysis
$ npx skills add MobSF/Mobile-Security-Framework-MobSFHow to choose
When should you switch?
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Horusec if it already passes your workflow test and repository review.
Next step
Compare top candidates side by side
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.