Skill comparison
Use this as a shortlist, then open the skill detail page before adopting.
Decision summary
Strongest overall
Infer
Use this as a leading candidate, then validate the README and install path in your own agent stack.
Fastest prototype
Infer
Best first install candidate based on install readiness and adoption.
Freshest repo
Grype
Most recent maintenance signal among this shortlist.
| Signal | Gosec Go security checker | Grype A vulnerability scanner for container images and filesystems | Syft CLI tool and library for generating a Software Bill of Materials from container images and filesystems | Infer A static analyzer for Java, C, C++, and Objective-C |
|---|---|---|---|---|
| Quality | 100/100 Excellent | 100/100 Excellent | 100/100 Excellent | 100/100 Excellent |
| Decision verdict | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. | 100/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack. |
| Adoption | 8.9K stars 0 installs | 13K stars 0 installs | 9.1K stars 0 installs | 16K stars |
| Freshness | Jun 15, 2026 | Jul 17, 2026 | Jun 19, 2026 | Jun 13, 2026 |
| Use-case fit |
| Workflow fit |
| Platform hints | Go, Static Analysis, Claude Code | Go, Static Analysis, Claude Code | Go, Static Analysis, Claude Code | OCaml, Static Analysis, Claude Code |
| Warnings | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet | No OpenAgentSkill engagement data yet |
| Best for | Coding agents workflows · Claude Code teams · teams that value GitHub adoption signals | Coding agents workflows · Claude Code teams · teams that value GitHub adoption signals | Coding agents workflows · Claude Code teams · teams that value GitHub adoption signals | Coding agents workflows · Claude Code teams · teams that value GitHub adoption signals |
| Not ideal for | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review | teams that need a vendor-supported SLA · high-compliance environments without internal security review |
| OpenAgentSkill engagement | 0 views 0 install copies | 0 views 0 install copies | 0 views 0 install copies | 0 views 0 install copies |
| Install | $ npx skills add securego/gosec | $ npx skills add anchore/grype | $ npx skills add anchore/syft | $ npx skills add facebook/infer |