Skill comparison
Use this as a shortlist, then open the skill detail page before adopting.
Decision summary
Strongest overall
Maigret
Use this as a leading candidate, then validate the README and install path in your own agent stack.
Fastest prototype
Maigret
Best first install candidate based on install readiness and adoption.
Freshest repo
code-security
Most recent maintenance signal among this shortlist.
| Signal | code-security Runs Semgrep security scans on the current project to detect vulnerabilities, secrets leakage, and OWASP Top 10 issues. Use when the user asks for security scanning, vulnerability detection, code auditing, secrets checking, or says things like 安全扫描, 代码扫描, 扫漏洞, 安全检查, 漏洞检测, 扫一下安全. | Nuclei Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations. | Maigret 🕵️♂️ Collect a dossier on a person by username from 3000+ sites | Zaproxy The ZAP by Checkmarx Core project |
|---|---|---|---|---|
| Quality | 66/100 Promising | 100/100 Excellent | 100/100 Excellent | 100/100 Excellent |
| Decision verdict | 65/100 Prototype first Prototype with this skill first; keep a fallback candidate ready. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. |
| Adoption | 169 stars Verified outcomes are shown on each skill page | 29K stars Verified outcomes are shown on each skill page | 33K stars Verified outcomes are shown on each skill page |
| 15K stars Verified outcomes are shown on each skill page |
| Freshness | Aug 12, 2026 | Jun 13, 2026 | Jun 11, 2026 | Jun 11, 2026 |
| Use-case fit |
| Workflow fit |
| Platform hints | Claude Code | Go, Security, Claude Code | Python, OSINT, Claude Code | Java, Security, Claude Code |
| Warnings | The skill instructs the agent to run `pip install semgrep` if not installed, which modifies the system environment; this is acceptable but should be noted as a potential side effect. · No OpenAgentSkill engagement data yet | No major risk signals from current metadata | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet |
| Best for | Security and compliance workflows · Claude Code teams · builders willing to evaluate younger projects | Security and compliance workflows · Claude Code teams · teams that value GitHub adoption signals | Research agents workflows · Claude Code teams · teams that value GitHub adoption signals | Security and compliance workflows · Claude Code teams · teams that value GitHub adoption signals |
| Not ideal for | teams that need a vendor-supported SLA · production agents without a repository review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review |
| OpenAgentSkill engagement | 0 views 0 install copies | 48 views 1 install copies | 0 views 0 install copies | 0 views 0 install copies |
| Install | $ npx skills add KimYx0207/Kim_Service --skill code-security | $ npx skills add projectdiscovery/nuclei | $ npx skills add soxoj/maigret | $ npx skills add zaproxy/zaproxy |