# trailofbits-skills alternatives: 12 Claude Code plugins like trailofbits/skills

Flowy lists 167 other Security plugins like trailofbits-skills, ranked by shared technologies, then GitHub stars; nothing in this list is paid.

Published: Oct 23, 2026 · Updated: Oct 28, 2026 · Author: Flowy
Canonical: https://www.flowy.sh/alternatives/trailofbits-skills

## How they compare

| Plugin | Stars | 7 days | Updated | License | Contains |
| --- | ---: | ---: | ---: | --- | --- |
| [trailofbits-skills](https://www.flowy.sh/listings/trailofbits-skills) | 7,851 | +163 | Oct 28, 2026 | CC-BY-SA-4.0 | 95 skills, 30 agents, 8 commands, 1 MCP server |
| [threat-modeling](https://www.flowy.sh/listings/fr33d3m0n-threat-modeling) | 351 | -1 | May 12, 2026 | BSD-3-Clause | 1 skill |
| [cti-expert](https://www.flowy.sh/listings/7onez-cti-expert) | 617 | +2 | Oct 22, 2026 | – | 1 skill, 9 commands, 2 hooks |
| [offensive-claude](https://www.flowy.sh/listings/hypnguyen1209-offensive-claude) | 403 | +8 | Oct 22, 2026 | MIT | 38 skills, 8 agents, 18 commands, 2 hooks |
| [cosai-oasis-codeguard-security](https://www.flowy.sh/listings/cosai-oasis-project-codeguard) | 356 | +3 | Oct 12, 2026 | – | 3 skills, 1 agent |
| [clearfront-osint](https://www.flowy.sh/listings/scottmartinanderson-clearfront) | 11 | +1 | Aug 26, 2026 | MIT | 1 skill |
| [ida-pro-mcp](https://www.flowy.sh/alternatives/mrexodia-ida-pro-mcp) | 13,196 | +124 | Sep 26, 2026 | MIT | 1 skill |
| [hello-js-reverse-skill](https://www.flowy.sh/alternatives/whitenightshadow-hello-js-reverse-skill) | 1,380 | – | Sep 8, 2026 | – | 1 skill |
| [agentshield](https://www.flowy.sh/alternatives/affaan-m-agentshield) | 1,327 | +27 | Oct 18, 2026 | MIT | 1 skill |
| [fofamap](https://www.flowy.sh/listings/asaotomo-fofamap) | 750 | +1 | Aug 16, 2026 | Apache-2.0 | 1 skill, 1 MCP server |
| [opencode-power-pack](https://www.flowy.sh/listings/waybarrios-opencode-power-pack) | 545 | +2 | Oct 26, 2026 | MIT | 55 skills |
| [bountyforge](https://www.flowy.sh/listings/gabson0x-bountyforge) | 457 | +2 | Sep 16, 2026 | – | 29 skills |
| [owasp-security](https://www.flowy.sh/listings/agamm-claude-code-owasp) | 415 | +28 | Sep 25, 2026 | MIT | 1 skill |

## The 12 closest alternatives

1. [threat-modeling](https://www.flowy.sh/listings/fr33d3m0n-threat-modeling) (351 stars, -1 this week). AI-native automated software risk analysis skill. [threat-modeling on Flowy](https://www.flowy.sh/listings/fr33d3m0n-threat-modeling)
2. [cti-expert](https://www.flowy.sh/listings/7onez-cti-expert) (617 stars, +2 this week). CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. [cti-expert on Flowy](https://www.flowy.sh/listings/7onez-cti-expert)
3. [offensive-claude](https://www.flowy.sh/listings/hypnguyen1209-offensive-claude) (403 stars, +8 this week). A spec-driven offensive security framework for Claude Code — structured engagement workflows based on the Cyber Kill Chain, 32 kill-chain… [offensive-claude on Flowy](https://www.flowy.sh/listings/hypnguyen1209-offensive-claude)
4. [cosai-oasis-codeguard-security](https://www.flowy.sh/listings/cosai-oasis-project-codeguard) (356 stars, +3 this week). This repository is for the work of the Coalition for Secure AI (CoSAI). [cosai-oasis-codeguard-security on Flowy](https://www.flowy.sh/listings/cosai-oasis-project-codeguard)
5. [clearfront-osint](https://www.flowy.sh/listings/scottmartinanderson-clearfront) (11 stars, +1 this week). Clearfront OSINT: free, open-source AI OSINT agent that maps your digital footprint across 3,400+ public data sources. [clearfront-osint on Flowy](https://www.flowy.sh/listings/scottmartinanderson-clearfront)
6. [ida-pro-mcp](https://www.flowy.sh/listings/mrexodia-ida-pro-mcp) (13,196 stars, +124 this week). Simple MCP Server to allow vibe reversing in IDA Pro. [ida-pro-mcp on Flowy](https://www.flowy.sh/listings/mrexodia-ida-pro-mcp) · [ida-pro-mcp alternatives](https://www.flowy.sh/alternatives/mrexodia-ida-pro-mcp)
7. [hello-js-reverse-skill](https://www.flowy.sh/listings/whitenightshadow-hello-js-reverse-skill) (1,380 stars). 面向 Web API 通用采集、接口签名分析与改版回归的 Skill。已有协议与样本时直接验证 Node.js/Python 调用；需要页面取证时使用 Camoufox MCP 捕获网络、定位源码和调试 Hook，再交付可验证的采集程序。. [hello-js-reverse-skill on Flowy](https://www.flowy.sh/listings/whitenightshadow-hello-js-reverse-skill) · [hello-js-reverse-skill alternatives](https://www.flowy.sh/alternatives/whitenightshadow-hello-js-reverse-skill)
8. [agentshield](https://www.flowy.sh/listings/affaan-m-agentshield) (1,327 stars, +27 this week). Security auditor for AI agent configurations Scans Claude Code setups for hardcoded secrets, permission misconfigs, hook injection, MCP… [agentshield on Flowy](https://www.flowy.sh/listings/affaan-m-agentshield) · [agentshield alternatives](https://www.flowy.sh/alternatives/affaan-m-agentshield)
9. [fofamap](https://www.flowy.sh/listings/asaotomo-fofamap) (750 stars, +1 this week). 把自然语言资产发现、FOFA 证据检索、AI 反思总结与经人工审批的 Nuclei 扫描，放进同一条可追溯工作流。 FofaMap 既能像传统 CLI 一样直接执行 FOFA 语句，也能让 Agent… [fofamap on Flowy](https://www.flowy.sh/listings/asaotomo-fofamap)
10. [opencode-power-pack](https://www.flowy.sh/listings/waybarrios-opencode-power-pack) (545 stars, +2 this week). 54 rigorous skills for Codex, OpenCode, and Pi: code review, security audit, feature development, frontend design, MCP tools, Hugging Face… [opencode-power-pack on Flowy](https://www.flowy.sh/listings/waybarrios-opencode-power-pack)
11. [bountyforge](https://www.flowy.sh/listings/gabson0x-bountyforge) (457 stars, +2 this week). All-round bug bounty skill for Claude Code — parallelized agents for smart contract audits (EVM, Move, Solana, TRON), web/API security… [bountyforge on Flowy](https://www.flowy.sh/listings/gabson0x-bountyforge)
12. [owasp-security](https://www.flowy.sh/listings/agamm-claude-code-owasp) (415 stars, +28 this week). A Claude Code skill providing the latest OWASP security best practices (2025-2026) for developers building secure applications. [owasp-security on Flowy](https://www.flowy.sh/listings/agamm-claude-code-owasp)

## Questions about trailofbits-skills alternatives

### What is the best alternative to trailofbits-skills?

threat-modeling is the first of 12 alternatives to trailofbits-skills by shared technologies: it has 351 stars (behind trailofbits-skills) and lost 1 stars this week.

### Which trailofbits-skills alternative has the most skills?

opencode-power-pack has the most, with 55 skills of the 12 alternatives listed. trailofbits-skills has 95.

### Is trailofbits-skills free?

trailofbits-skills is published under the CC-BY-SA-4.0 license. Read its terms before you use it.

## Related

- [Security plugins on Flowy](https://www.flowy.sh/listings/category/security)
- [Browse all skills](https://www.flowy.sh/skills)
- [Browse all agents](https://www.flowy.sh/agents)
- [Browse all commands](https://www.flowy.sh/commands)
- [Browse all MCP servers](https://www.flowy.sh/mcp)
- [trailofbits-skills on Flowy](https://www.flowy.sh/listings/trailofbits-skills)