# shiro-attack2 alternatives: 12 Claude Code plugins like summersec/shiroattack2

Flowy lists 167 other Security plugins like shiro-attack2, ranked by shared technologies, then GitHub stars; nothing in this list is paid.

Published: Oct 23, 2026 · Updated: Oct 30, 2026 · Author: Flowy
Canonical: https://www.flowy.sh/alternatives/summersec-shiroattack2

## How they compare

| Plugin | Stars | 7 days | Updated | License | Contains |
| --- | ---: | ---: | ---: | --- | --- |
| [shiro-attack2](https://www.flowy.sh/listings/summersec-shiroattack2) | 2,634 | -1 | Jun 4, 2026 | MIT | 1 skill |
| [cdxgen](https://www.flowy.sh/alternatives/cdxgen-cdxgen) | 1,094 | +5 | Oct 28, 2026 | Apache-2.0 | 14 skills |
| [reverse-engineering-assistant](https://www.flowy.sh/listings/cyberkaida-reverse-engineering-assistant) | 885 | +7 | Oct 27, 2026 | Apache-2.0 | 6 skills, 2 agents, 1 MCP server |
| [semgrep-skills](https://www.flowy.sh/listings/semgrep-skills) | 332 | +3 | Jul 28, 2026 | – | 3 skills |
| [red-run](https://www.flowy.sh/listings/blacklanternsecurity-red-run) | 299 | +6 | Oct 23, 2026 | AGPL-3.0 | 79 skills, 12 agents, 7 MCP servers |
| [sonarqube](https://www.flowy.sh/listings/sonarsource-sonarqube-agent-plugins) | 113 | – | Oct 29, 2026 | – | 10 skills, 1 agent |
| [reverse-skill](https://www.flowy.sh/alternatives/zhaoxuya520-reverse-skill) | 43,557 | +733 | Sep 22, 2026 | MIT | 46 skills |
| [watermarks-remover](https://www.flowy.sh/alternatives/guillaumemeyer-watermarks-remover) | 25,426 | – | Oct 26, 2026 | MIT | 2 skills, 1 hook |
| [ironclaw](https://www.flowy.sh/alternatives/nearai-ironclaw) | 12,676 | – | Oct 29, 2026 | Apache-2.0 | 23 skills, 6 commands, 1 MCP server |
| [openmed](https://www.flowy.sh/alternatives/maziyarpanahi-openmed) | 5,712 | +26 | Oct 30, 2026 | Apache-2.0 | 74 skills |
| [skill-scanner](https://www.flowy.sh/alternatives/cisco-ai-defense-skill-scanner) | 2,651 | +43 | Oct 26, 2026 | – | 29 skills |
| [pentest-ai-agents](https://www.flowy.sh/alternatives/0xsteph-pentest-ai-agents) | 2,378 | +19 | Oct 6, 2026 | MIT | 52 agents, 3 commands |
| [reverse-skills](https://www.flowy.sh/alternatives/p4nda0s-reverse-skills) | 2,315 | +22 | May 6, 2026 | – | 7 skills |

## The 12 closest alternatives

1. [cdxgen](https://www.flowy.sh/listings/cdxgen-cdxgen) (1,094 stars, +5 this week). cdxgen is a CLI tool, library, REPL, and server to create, validate, sign, and verify software BOMs. [cdxgen on Flowy](https://www.flowy.sh/listings/cdxgen-cdxgen) · [cdxgen alternatives](https://www.flowy.sh/alternatives/cdxgen-cdxgen)
2. [reverse-engineering-assistant](https://www.flowy.sh/listings/cyberkaida-reverse-engineering-assistant) (885 stars, +7 this week). A Ghidra extension that provides a Model Context Protocol (MCP) server for AI-assisted reverse engineering ReVa (Reverse Engineering… [reverse-engineering-assistant on Flowy](https://www.flowy.sh/listings/cyberkaida-reverse-engineering-assistant)
3. [semgrep-skills](https://www.flowy.sh/listings/semgrep-skills) (332 stars, +3 this week). A collection of skills for AI coding agents. [semgrep-skills on Flowy](https://www.flowy.sh/listings/semgrep-skills)
4. [red-run](https://www.flowy.sh/listings/blacklanternsecurity-red-run) (299 stars, +6 this week). Security assessment toolkit for Claude Code. [red-run on Flowy](https://www.flowy.sh/listings/blacklanternsecurity-red-run)
5. [sonarqube](https://www.flowy.sh/listings/sonarsource-sonarqube-agent-plugins) (113 stars). Made by Sonar SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs… [sonarqube on Flowy](https://www.flowy.sh/listings/sonarsource-sonarqube-agent-plugins)
6. [reverse-skill](https://www.flowy.sh/listings/zhaoxuya520-reverse-skill) (43,557 stars, +733 this week). Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain… [reverse-skill on Flowy](https://www.flowy.sh/listings/zhaoxuya520-reverse-skill) · [reverse-skill alternatives](https://www.flowy.sh/alternatives/zhaoxuya520-reverse-skill)
7. [watermarks-remover](https://www.flowy.sh/listings/guillaumemeyer-watermarks-remover) (25,426 stars). Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you… [watermarks-remover on Flowy](https://www.flowy.sh/listings/guillaumemeyer-watermarks-remover) · [watermarks-remover alternatives](https://www.flowy.sh/alternatives/guillaumemeyer-watermarks-remover)
8. [ironclaw](https://www.flowy.sh/listings/nearai-ironclaw) (12,676 stars). IronClaw is an Agent OS focused on privacy, security and extensibility. [ironclaw on Flowy](https://www.flowy.sh/listings/nearai-ironclaw) · [ironclaw alternatives](https://www.flowy.sh/alternatives/nearai-ironclaw)
9. [openmed](https://www.flowy.sh/listings/maziyarpanahi-openmed) (5,712 stars, +26 this week). Local-first healthcare AI: clinical NER and HIPAA PII de-identification on hardware you control. [openmed on Flowy](https://www.flowy.sh/listings/maziyarpanahi-openmed) · [openmed alternatives](https://www.flowy.sh/alternatives/maziyarpanahi-openmed)
10. [skill-scanner](https://www.flowy.sh/listings/cisco-ai-defense-skill-scanner) (2,651 stars, +43 this week). A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. [skill-scanner on Flowy](https://www.flowy.sh/listings/cisco-ai-defense-skill-scanner) · [skill-scanner alternatives](https://www.flowy.sh/alternatives/cisco-ai-defense-skill-scanner)
11. [pentest-ai-agents](https://www.flowy.sh/listings/0xsteph-pentest-ai-agents) (2,378 stars, +19 this week). 50 Claude Code subagents for penetration testing. [pentest-ai-agents on Flowy](https://www.flowy.sh/listings/0xsteph-pentest-ai-agents) · [pentest-ai-agents alternatives](https://www.flowy.sh/alternatives/0xsteph-pentest-ai-agents)
12. [reverse-skills](https://www.flowy.sh/listings/p4nda0s-reverse-skills) (2,315 stars, +22 this week). 逆向工程分析技能，支持 40+ 种 AI 编程工具。 专为 IDA-NO-MCP 设计 - 从 IDA 导出反编译结果，然后使用 AI 编程工具进行分析。. [reverse-skills on Flowy](https://www.flowy.sh/listings/p4nda0s-reverse-skills) · [reverse-skills alternatives](https://www.flowy.sh/alternatives/p4nda0s-reverse-skills)

## Questions about shiro-attack2 alternatives

### What is the best alternative to shiro-attack2?

cdxgen is the first of 12 alternatives to shiro-attack2 by shared technologies: it has 1,094 stars (behind shiro-attack2), gained 5 stars this week and ships 14 skills against 1 for shiro-attack2.

### Which shiro-attack2 alternative has the most skills?

red-run has the most, with 79 skills of the 12 alternatives listed. shiro-attack2 has 1.

### Is shiro-attack2 free?

Yes. shiro-attack2 is published under the MIT license, so it is free to use.

## Related

- [Security plugins on Flowy](https://www.flowy.sh/listings/category/security)
- [Browse all skills](https://www.flowy.sh/skills)
- [shiro-attack2 on Flowy](https://www.flowy.sh/listings/summersec-shiroattack2)