Skill comparison
Use this as a shortlist, then open the skill detail page before adopting.
Decision summary
Strongest overall
Grype
Use this as a leading candidate, then validate the README and install path in your own agent stack.
Fastest prototype
Grype
Best first install candidate based on install readiness and adoption.
Freshest repo
Grype
Most recent maintenance signal among this shortlist.
| Signal | HuskyCI Performing security tests inside your CI | Grype A vulnerability scanner for container images and filesystems | Syft CLI tool and library for generating a Software Bill of Materials from container images and filesystems | Gosec Go security checker |
|---|---|---|---|---|
| Quality | 54/100 Needs review | 100/100 Excellent | 100/100 Excellent | 100/100 Excellent |
| Decision verdict | 56/100 Needs manual review Do a manual repository review before adding this to an agent workflow. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. |
| Adoption | 595 stars Verified outcomes are shown on each skill page | 13K stars Verified outcomes are shown on each skill page | 9.1K stars Verified outcomes are shown on each skill page |
| 8.9K stars Verified outcomes are shown on each skill page |
| Freshness | May 15, 2024 | Jul 17, 2026 | Jun 19, 2026 | Jun 15, 2026 |
| Use-case fit |
| Workflow fit |
| Platform hints | Go, Static Analysis, Claude Code | Go, Static Analysis, Claude Code | Go, Static Analysis, Claude Code | Go, Static Analysis, Claude Code |
| Warnings | Repository looks stale · No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet |
| Best for | Coding agents workflows · Claude Code teams · teams that value GitHub adoption signals | Security and compliance workflows · Claude Code teams · teams that value GitHub adoption signals | Coding agents workflows · Claude Code teams · teams that value GitHub adoption signals | Coding agents workflows · Claude Code teams · teams that value GitHub adoption signals |
| Not ideal for | teams that require actively maintained dependencies · production agents without a repository review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review |
| OpenAgentSkill engagement | 0 views 0 install copies | 0 views 0 install copies | 0 views 0 install copies | 0 views 0 install copies |
| Install | $ npx skills add globocom/huskyCI | $ npx skills add anchore/grype | $ npx skills add anchore/syft | $ npx skills add securego/gosec |