Skill comparison
Use this as a shortlist, then open the skill detail page before adopting.
Decision summary
Strongest overall
Maigret
Use this as a leading candidate, then validate the README and install path in your own agent stack.
Fastest prototype
Maigret
Best first install candidate based on install readiness and adoption.
Freshest repo
wp-plugin-security
Most recent maintenance signal among this shortlist.
| Signal | wp-plugin-security Security guidelines for WordPress plugin development: sanitization, validation, escaping (in PHP and in admin JavaScript), nonces, capabilities over objects, multisite privilege boundaries, SQL injection prevention, XSS protection, and CSRF mitigation. Use it when writing or reviewing any plugin code that handles user input, prints dynamic output, registers AJAX or REST endpoints, checks permissions, writes files shared by a network, or suppresses PHPCS security sniffs. Based on official WordPress Developer Resources and on a post-incident review of CVE-2026-81754. | Nuclei Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations. | Maigret 🕵️♂️ Collect a dossier on a person by username from 3000+ sites | Zaproxy The ZAP by Checkmarx Core project |
|---|---|---|---|---|
| Quality | 63/100 Promising | 100/100 Excellent | 100/100 Excellent | 100/100 Excellent |
| Decision verdict | 62/100 Prototype first Prototype with this skill first; keep a fallback candidate ready. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. |
| Adoption | 40 stars Verified outcomes are shown on each skill page | 29K stars Verified outcomes are shown on each skill page | 33K stars Verified outcomes are shown on each skill page |
| 15K stars Verified outcomes are shown on each skill page |
| Freshness | Aug 30, 2026 | Jun 13, 2026 | Jun 11, 2026 | Jun 11, 2026 |
| Use-case fit |
| Workflow fit |
| Platform hints | Claude Code, Browser agents | Go, Security, Claude Code | Python, OSINT, Claude Code | Java, Security, Claude Code |
| Warnings | Low GitHub adoption signal · No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet |
| Best for | Browser automation workflows · Claude Code teams · builders willing to evaluate younger projects | Security and compliance workflows · Claude Code teams · teams that value GitHub adoption signals | RAG and knowledge workflows · Claude Code teams · teams that value GitHub adoption signals | Coding agents workflows · Claude Code teams · teams that value GitHub adoption signals |
| Not ideal for | teams that need a vendor-supported SLA · production agents without a repository review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review |
| OpenAgentSkill engagement | 0 views 0 install copies | 0 views 0 install copies | 0 views 0 install copies | 0 views 0 install copies |
| Install | $ npx skills add fernandotellado/ai-skills --skill wp-plugin-security | $ npx skills add projectdiscovery/nuclei | $ npx skills add soxoj/maigret | $ npx skills add zaproxy/zaproxy |