Alternatives to ai-security-hardening
ai-security-hardening is an agent skill by devops-skills: Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks. If it doesn't fit your setup, these 12 agent skills cover similar ground. They are ordered by how closely they match ai-security-hardening and by our rank, which weighs adoption, freshness and documentation; money never changes the order. update-deps leads the list (repository has 9.6K stars; active in the last 30 days). 2 of them are published by the company behind the product. Each entry shows data reasons to switch, and you can open a side-by-side comparison with ai-security-hardening.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
You're replacing
ai-security-hardening
Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks.
12 alternatives
Ordered by how closely each matches ai-security-hardening (shared product, category or stated alternative) and by rank.
- 1update-deps
backnotprop
Audit and update npm/Bun dependencies with supply chain integrity checks — verifies maintainers, publish age, tarball diffs, and provenance before bumping.
- Repository has 9.6K stars
- Active in the last 30 days
★ 9.6KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 2indirect-injection-detection
TencentOfficial
Detect indirect prompt injection (goal hijack).
- Published by the vendor
★ 7.1KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 3direct-injection-detection
TencentOfficial
Detect direct prompt injection or instruction override via user message (no external content).
- Published by the vendor
★ 7.1KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 4dsh-npm
Rimagination
Package an MCP server or agent plugin as a DeepSeek Harness (DSH) Cordis bundle and publish it to registry.npmjs.org so DSH's Plugins → Add plugin installs it…
- Repository has 1.2K stars
- Active in the last 30 days
★ 1.2KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 5ai-agent-security
devops-skills
Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.
- Largest repository here (48,428 stars)
- Active in the last 30 days
★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 6dev-security-audit
sd0xdev
Comprehensive developer workstation security audit — scans for exposed credentials, compromised application data, persistence mechanisms, and supply chain…
- Active in the last 30 days
- Open source (MIT)
★ 194Last active Oct 6, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 7package-security-check
instructa
Run a reusable JavaScript supply-chain security baseline with pnpm-first hardening, release-age gating, lifecycle-script controls, exotic dependency checks…
- Supports Python
★ 139Last active Oct 15, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 8pentest-supply-chain
jd-opensource
Software supply chain security — dependency confusion, CI/CD pipeline attacks, lockfile integrity, and build artifact verification.
- Open source (Apache-2.0)
★ 315Last active Jul 2, 2026Claude Code, Claude apps, Codex, Cursor +6
CFreshness: C–Security: not graded yet - 9ontoly-software-graph
anbeime
Use Ontoly's deterministic Software Graph and MCP capabilities for architecture review, request tracing, dependency analysis, configuration lookup, and impact…
- Repository has 8.6K stars
★ 8.6KLast active Sep 2, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet - 10common-tasks
trezor
Dependency management, package creation, and troubleshooting commands for the Trezor Suite monorepo.
- Repository has 1.1K stars
- Active in the last 30 days
★ 1.1KLast active Oct 21, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet - 11hunt-llm
Encod3d-Sec
LLM / AI application attack hunting - prompt injection (direct + indirect), excessive agency, insecure output handling, system-prompt + data leakage.
- Open source (MIT)
★ 335Last active Aug 19, 2026Claude Code, Claude apps, Codex, Cursor +6
BFreshness: B–Security: not graded yet - 12cyrus-setup-prerequisites
cyrusagents
Check and install prerequisites for Cyrus — Node.js, jq, gh CLI, and the cyrus-ai npm package.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 867Last active Sep 30, 2026Claude Code, Claude apps, Codex, Cursor +6
AFreshness: A–Security: not graded yet
Related
- Best ofBest agent skills for MCP and agent security
- Best ofBest agent skills for logistics and shipping
- AlternativesAlternatives to indirect-injection-detection
- AlternativesAlternatives to direct-injection-detection
- AlternativesAlternatives to ai-agent-security
- Host guideAgent skills for Gemini CLI
- Host guideAgent skills for Cursor