Alternatives to security-advisory
security-advisory is an agent skill by modelcontextprotocol: Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or…. If it doesn't fit your setup, these 12 agent skills cover similar ground. They are ordered by how closely they match security-advisory and by our rank, which weighs adoption, freshness and documentation; money never changes the order. aig-scanner leads the list (open source; supports Python). 5 of them are published by the company behind the product. Each entry shows data reasons to switch, and you can open a side-by-side comparison with security-advisory.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
You're replacing
security-advisory
Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or…
12 alternatives
Ordered by how closely each matches security-advisory (shared product, category or stated alternative) and by rank.
- 1aig-scanner
TencentOfficial
A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.
- Open source
- Supports Python
★ 7.1KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 2component-vuln-intel
AIPentest
联网情报收集:识别组件后必做CVE/搜索引擎/中文社区/GitHub PoC/资产引擎/即时情报/依赖扩展+受阻换路。Use when a framework/component/version is identified and must search before exploit.
- Open source
★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 3pentest-blackboard
AIPentest
CyberStrikeAI 项目黑板：跨会话 Fact 图（SQLite）+ upsert_project_fact/record_vulnerability 边渗透边记录节奏、关系边 links、confidence、与多代理协调落库。Use when managing project facts…
- Open source
★ 8KLast active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 4owasp-asi
TencentOfficial
OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework.
- Open source
★ 7.1KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 5cso
garrytan
Security audit: supported static findings; qualified profiles add reproduction and repair candidates.
- Open source
★ 137.5KLast active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 6security-audit
cloudflareOfficial
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.
- Open source
- Supports JavaScript
★ 43.8KLast active Sep 14, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet - 7security-review
getsentryOfficial
Security code review for vulnerabilities.
- Open source
★ 1.1KLast active Oct 19, 2026Claude Code
AFreshness: A–Security: not graded yet - 8security-model
getsentryOfficial
Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…
- Open source
- Supports Python
★ 1.1KLast active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 9impl
markuplint
Implementation orchestrator — takes an agreed plan through implementation, carry-over approval, code review, security review, QA, docs consistency, lint/test…
- Open source
- Supports JavaScript
★ 629Last active Oct 21, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 10regulatory-threat-model
Ansvar Systems AB
Use when an application or system — including one built quickly with AI coding agents — needs a security review with regulatory grounding: a STRIDE threat…
- Open source
★ 895Last active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 11incident-reporting-navigator
Ansvar Systems AB
Use when a security incident, data breach, or actively exploited vulnerability raises the question "who must we notify, where, and by when?" Screens one…
- Open source
★ 895Last active Oct 19, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 12svc-mobile-android
s0ld13rr
Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis.
- Open source
★ 883Last active Oct 23, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet