1. threat-modeling
351 stars-1 this week
AI-native automated software risk analysis skill.
trailofbits-skills alternatives: 12 Claude Code plugins like trailofbits/skills
Flowy lists 167 other Security plugins like trailofbits-skills, ranked by shared technologies, then GitHub stars; nothing in this list is paid.
Published · Updated · By Flowy
How they compare
| Plugin | Stars | 7 days | Updated | License | Contains |
|---|---|---|---|---|---|
| trailofbits-skillsThis page | 7,851 | +163 | Oct 28, 2026 | CC-BY-SA-4.0 | 95 skills, 30 agents, 8 commands, 1 MCP server |
| 1threat-modeling | 351 | -1 | May 12, 2026 | BSD-3-Clause | 1 skill |
| 2cti-expert | 617 | +2 | Oct 22, 2026 | not available | 1 skill, 9 commands, 2 hooks |
| 3offensive-claude | 403 | +8 | Oct 22, 2026 | MIT | 38 skills, 8 agents, 18 commands, 2 hooks |
| 4cosai-oasis-codeguard-security | 356 | +3 | Oct 12, 2026 | not available | 3 skills, 1 agent |
| 5clearfront-osint | 11 | +1 | Aug 26, 2026 | MIT | 1 skill |
| 6ida-pro-mcp | 13,196 | +124 | Sep 26, 2026 | MIT | 1 skill |
| 7hello-js-reverse-skill | 1,380 | not available | Sep 8, 2026 | not available | 1 skill |
| 8agentshield | 1,327 | +27 | Oct 18, 2026 | MIT | 1 skill |
| 9fofamap | 750 | +1 | Aug 16, 2026 | Apache-2.0 | 1 skill, 1 MCP server |
| 10opencode-power-pack | 545 | +2 | Oct 26, 2026 | MIT | 55 skills |
| 11bountyforge | 457 | +2 | Sep 16, 2026 | not available | 29 skills |
| 12owasp-security | 415 | +28 | Sep 25, 2026 | MIT | 1 skill |
The 12 closest alternatives
2. cti-expert
617 stars+2 this week
CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex.
3. offensive-claude
403 stars+8 this week
A spec-driven offensive security framework for Claude Code — structured engagement workflows based on the Cyber Kill Chain, 32 kill-chain…
4. cosai-oasis-codeguard-security
356 stars+3 this week
This repository is for the work of the Coalition for Secure AI (CoSAI).
5. clearfront-osint
11 stars+1 this week
Clearfront OSINT: free, open-source AI OSINT agent that maps your digital footprint across 3,400+ public data sources.
6. ida-pro-mcp
13,196 stars+124 this week
Simple MCP Server to allow vibe reversing in IDA Pro.
7. hello-js-reverse-skill
1,380 stars
面向 Web API 通用采集、接口签名分析与改版回归的 Skill。已有协议与样本时直接验证 Node.js/Python 调用；需要页面取证时使用 Camoufox MCP 捕获网络、定位源码和调试 Hook，再交付可验证的采集程序。
8. agentshield
1,327 stars+27 this week
Security auditor for AI agent configurations Scans Claude Code setups for hardcoded secrets, permission misconfigs, hook injection, MCP…
9. fofamap
750 stars+1 this week
把自然语言资产发现、FOFA 证据检索、AI 反思总结与经人工审批的 Nuclei 扫描，放进同一条可追溯工作流。 FofaMap 既能像传统 CLI 一样直接执行 FOFA 语句，也能让 Agent…
10. opencode-power-pack
545 stars+2 this week
54 rigorous skills for Codex, OpenCode, and Pi: code review, security audit, feature development, frontend design, MCP tools, Hugging Face…
11. bountyforge
457 stars+2 this week
All-round bug bounty skill for Claude Code — parallelized agents for smart contract audits (EVM, Move, Solana, TRON), web/API security…
12. owasp-security
415 stars+28 this week
A Claude Code skill providing the latest OWASP security best practices (2025-2026) for developers building secure applications.
Questions about trailofbits-skills alternatives
What is the best alternative to trailofbits-skills?
threat-modeling is the first of 12 alternatives to trailofbits-skills by shared technologies: it has 351 stars (behind trailofbits-skills) and lost 1 stars this week.
Which trailofbits-skills alternative has the most skills?
opencode-power-pack has the most, with 55 skills of the 12 alternatives listed. trailofbits-skills has 95.
Is trailofbits-skills free?
trailofbits-skills is published under the CC-BY-SA-4.0 license. Read its terms before you use it.