Skill comparison
Use this as a shortlist, then open the skill detail page before adopting.
Decision summary
Strongest overall
Nuclei
Use this as a leading candidate, then validate the README and install path in your own agent stack.
Fastest prototype
Nuclei
Best first install candidate based on install readiness and adoption.
Freshest repo
ghost-scan-secrets
Most recent maintenance signal among this shortlist.
| Signal | ghost-scan-secrets Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and generates findings with severity and remediation guidance. Use when the user asks to check for leaked secrets, scan for credentials, find hardcoded API keys or passwords, detect exposed .env values, or audit code for sensitive data exposure. | Nuclei Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations. |
|---|---|---|
| Quality | 73/100 Strong | 100/100 Excellent |
| Decision verdict | 72/100 Strong shortlist Shortlist this skill and compare it with close alternatives before production adoption. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. |
| Adoption | 405 stars Verified outcomes are shown on each skill page | 29K stars Verified outcomes are shown on each skill page |
| Freshness | Sep 3, 2026 | Jun 13, 2026 |
| Use-case fit |
| Workflow fit |
| Platform hints | Claude Code | Go, Security, Claude Code |
| Warnings | The skill downloads and executes a binary from a remote URL via `curl | bash` without checksum verification, which is a supply chain risk. · No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet |
| Best for | Security and compliance workflows · Claude Code teams · builders willing to evaluate younger projects | Security and compliance workflows · Claude Code teams · teams that value GitHub adoption signals |
| Not ideal for | teams that need a vendor-supported SLA · production agents without a repository review | teams that need a vendor-supported SLA · high-compliance environments without internal security review |
| OpenAgentSkill engagement | 0 views 0 install copies | 0 views 0 install copies |
| Install | $ npx skills add ghostsecurity/skills --skill ghost-scan-secrets | $ npx skills add projectdiscovery/nuclei |