Skill comparison
Use this as a shortlist, then open the skill detail page before adopting.
Decision summary
Strongest overall
Maigret
Use this as a leading candidate, then validate the README and install path in your own agent stack.
Fastest prototype
Maigret
Best first install candidate based on install readiness and adoption.
Freshest repo
ghost-scan-deps
Most recent maintenance signal among this shortlist.
| Signal | ghost-scan-deps Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependency vulnerabilities, vulnerable packages, CVE checks, security audits of dependencies, or wants to scan lockfiles like package-lock.json, yarn.lock, go.sum, or Gemfile.lock. | Wazuh Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. | Maigret 🕵️♂️ Collect a dossier on a person by username from 3000+ sites | Nuclei Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations. |
|---|---|---|---|---|
| Quality | 73/100 Strong | 100/100 Excellent | 100/100 Excellent | 100/100 Excellent |
| Decision verdict | 72/100 Strong shortlist Shortlist this skill and compare it with close alternatives before production adoption. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. |
| Adoption | 405 stars Verified outcomes are shown on each skill page | 16K stars Verified outcomes are shown on each skill page | 33K stars Verified outcomes are shown on each skill page |
Skill comparison
Use this as a shortlist, then open the skill detail page before adopting.
Decision summary
Strongest overall
Maigret
Use this as a leading candidate, then validate the README and install path in your own agent stack.
Fastest prototype
Maigret
Best first install candidate based on install readiness and adoption.
Freshest repo
ghost-scan-deps
Most recent maintenance signal among this shortlist.
| Signal | ghost-scan-deps Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependency vulnerabilities, vulnerable packages, CVE checks, security audits of dependencies, or wants to scan lockfiles like package-lock.json, yarn.lock, go.sum, or Gemfile.lock. | Wazuh Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. | Maigret 🕵️♂️ Collect a dossier on a person by username from 3000+ sites | Nuclei Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations. |
|---|---|---|---|---|
| Quality | 73/100 Strong | 100/100 Excellent | 100/100 Excellent | 100/100 Excellent |
| Decision verdict | 72/100 Strong shortlist Shortlist this skill and compare it with close alternatives before production adoption. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. |
| Adoption | 405 stars Verified outcomes are shown on each skill page | 16K stars Verified outcomes are shown on each skill page | 33K stars Verified outcomes are shown on each skill page |
| 29K stars Verified outcomes are shown on each skill page |
| Freshness | Sep 3, 2026 | Jul 24, 2026 | Jun 11, 2026 | Jun 13, 2026 |
| Use-case fit |
| Workflow fit |
| Platform hints | Claude Code | C++, Compliance, Claude Code | Python, OSINT, Claude Code | Go, Security, Claude Code |
| Warnings | The skill installs the wraith binary via `curl ... | bash`, which executes remote code. While the script is from the same organization, this is a supply chain risk that could be mitigated by pinning a specific version or using a checksum verification. · No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet |
| Best for | Security and compliance workflows · Claude Code teams · builders willing to evaluate younger projects | Workflow automation workflows · Claude Code teams · teams that value GitHub adoption signals | RAG and knowledge workflows · Claude Code teams · teams that value GitHub adoption signals | Security and compliance workflows · Claude Code teams · teams that value GitHub adoption signals |
| Not ideal for | teams that need a vendor-supported SLA · production agents without a repository review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review |
| OpenAgentSkill engagement | 0 views 0 install copies | 0 views 0 install copies | 0 views 0 install copies | 0 views 0 install copies |
| Install | $ npx skills add ghostsecurity/skills --skill ghost-scan-deps | $ npx skills add wazuh/wazuh | $ npx skills add soxoj/maigret | $ npx skills add projectdiscovery/nuclei |
| 29K stars Verified outcomes are shown on each skill page |
| Freshness | Sep 3, 2026 | Jul 24, 2026 | Jun 11, 2026 | Jun 13, 2026 |
| Use-case fit |
| Workflow fit |
| Platform hints | Claude Code | C++, Compliance, Claude Code | Python, OSINT, Claude Code | Go, Security, Claude Code |
| Warnings | The skill installs the wraith binary via `curl ... | bash`, which executes remote code. While the script is from the same organization, this is a supply chain risk that could be mitigated by pinning a specific version or using a checksum verification. · No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet |
| Best for | Security and compliance workflows · Claude Code teams · builders willing to evaluate younger projects | Workflow automation workflows · Claude Code teams · teams that value GitHub adoption signals | RAG and knowledge workflows · Claude Code teams · teams that value GitHub adoption signals | Security and compliance workflows · Claude Code teams · teams that value GitHub adoption signals |
| Not ideal for | teams that need a vendor-supported SLA · production agents without a repository review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review |
| OpenAgentSkill engagement | 0 views 0 install copies | 0 views 0 install copies | 0 views 0 install copies | 0 views 0 install copies |
| Install | $ npx skills add ghostsecurity/skills --skill ghost-scan-deps | $ npx skills add wazuh/wazuh | $ npx skills add soxoj/maigret | $ npx skills add projectdiscovery/nuclei |