1. skill-scanner
2,651 stars+43 this week
A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns.
Flowy lists 167 other Security plugins like jwx, ranked by shared technologies, then GitHub stars; nothing in this list is paid.
Published · Updated · By Flowy
| Plugin | Stars | 7 days | Updated | License | Contains |
|---|---|---|---|---|---|
| jwxThis page | 2,441 | +2 | Oct 23, 2026 | MIT | 2 skills, 9 agents |
| 1skill-scanner | 2,651 | +43 | Oct 26, 2026 | not available | 29 skills |
| 2api-relay-audit | 896 | +10 | Oct 26, 2026 | AGPL-3.0 | 1 skill |
| 3skills-curated | 523 | +4 | Jul 14, 2026 | CC-BY-SA-4.0 | 31 skills, 1 agent, 4 commands |
| 4ai-plugins | 162 | not available | Oct 26, 2026 | not available | 73 skills, 4 agents, 10 commands, 1 MCP server |
| 5watermarks-remover | 25,426 | not available | Oct 26, 2026 | MIT | 2 skills, 1 hook |
| 6trailofbits-skills | 7,851 | +163 | Oct 28, 2026 | CC-BY-SA-4.0 | 95 skills, 30 agents, 8 commands, 1 MCP server |
| 7awarexone-agentic-bug-hunter | 5,478 | +91 | Oct 28, 2026 | MIT | 19 skills, 9 agents, 42 commands, 3 hooks |
| 8shuvonsec-claude-bug-bounty | 5,478 | +91 | Oct 28, 2026 | MIT | 19 skills, 9 agents, 42 commands, 3 hooks |
| 9claude-bughunter | 5,340 | +130 | Oct 28, 2026 | MIT | 83 skills, 15 commands |
| 10guardian-cli | 1,897 | +1 | Jun 27, 2026 | not available | 1 skill |
| 11agentshield | 1,327 | +27 | Oct 18, 2026 | MIT | 1 skill |
| 12claude-skills-governance-risk-and-compliance | 1,008 | +33 | Oct 10, 2026 | MIT | 36 skills |
2,651 stars+43 this week
A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns.
896 stars+10 this week
Local security audit for AI API relays and LLM proxies.
523 stars+4 this week
Trail of Bits' reviewed and approved Claude Code plugins.
162 stars
A curated collection of plugins for AI-assisted development at Bitwarden.
25,426 stars
Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you…
7,851 stars+163 this week
Trail of Bits skills and plugins for AI-assisted security analysis, testing, and development.
5,478 stars+91 this week
AI-powered bug bounty hunting toolkit that works with or without subscription.
5,478 stars+91 this week
AI-powered bug bounty hunting toolkit that works with or without subscription.
5,340 stars+130 this week
A self-contained Claude skill bundle for bug hunting and external red-team work · 83 skills · 15 slash commands · 681 disclosed-report…
1,897 stars+1 this week
Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to…
1,327 stars+27 this week
Security auditor for AI agent configurations Scans Claude Code setups for hardcoded secrets, permission misconfigs, hook injection, MCP…
1,008 stars+33 this week
Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA Cybersecurity, ISO 42001 AI Management…
skill-scanner is the first of 12 alternatives to jwx by shared technologies: it has 2,651 stars (ahead of jwx), gained 43 stars this week and ships 29 skills against 2 for jwx.
trailofbits-skills has the most, with 95 skills of the 12 alternatives listed. jwx has 2.
Yes. jwx is published under the MIT license, so it is free to use.