SkillSpector alternatives (2026)

Free / OSS · Apache-2.0 · 933 GitHub stars

VerdictApache local agent antivirus when you need runtime allow/block on tools and MCP — not skills-only scanners and not MCP-server audit alone.

CatchVs SkillSpector / mcp-scanner / destructive-command-guard / AI-Infra-Guard: SkillSpector scans skills pre-install; MCP Scanner audits MCP servers; dcg is a host deny-hook; AI-Infra-Guard is red-team platform — HOL Guard’s catch is runtime local policy/antivirus across agent actions including MCP calls. Policy false positives can stall agents; optional cloud is not required — keep local-first if that is the point.

Free / OSS · Apache-2.0 · 6.9k GitHub stars

VerdictApache-2.0 red-team platform for agent infrastructure. Worth running in a disposable, keyed environment; ship the attribution and scope every model credential.

CatchVs Promptfoo and DeepEval: AI-Infra-Guard is an AI-infrastructure red-team platform, not only an eval runner; vs generic SAST, it understands agent/MCP/skill attack surfaces. Preserve the mandatory attribution — “Based on Tencent Zhuque Lab AI-Infra-Guard” — with the repository link in your deployment and derivative notices. Some tools also require an LLM_API_KEY, so a self-hosted scanner can still carry provider cost and credential risk.

Free / OSS · Apache-2.0 · 1.1k GitHub stars

VerdictApache MCP server/tool scanner when you must gate MCP supply chain — not SkillSpector skills-only, not AI-Infra-Guard red-team platform, not dcg host hooks.

CatchVs SkillSpector / AI-Infra-Guard / destructive-command-guard: SkillSpector gates agent skills; AI-Infra-Guard is a broader red-team platform; dcg blocks destructive host commands — MCP Scanner’s catch is scanning MCP servers/tools/prompts/resources. Full Cisco AI Defense / VirusTotal paths need keys and network; treat OSS engines as the free bar and cloud engines as optional cost/trust.

Free / OSS · OSS/MIT · 431 GitHub stars

VerdictMIT MCP client-config auditor when you gate `.cursor/mcp.json` before connect — not Cisco MCP Scanner servers and not HOL Guard runtime policy.

CatchPackage: README PyPI badge may lag — install from the MIT git repo / pipx, not the unrelated PyPI name `mcpaudit` (different project). Vs mcp-scanner / hol-guard / skillspector: MCP Scanner audits MCP servers/tools; HOL Guard is runtime local allow/block; SkillSpector gates skills — mcp-audit-tool’s catch is client-config static audit. ★ still small; pin a commit; findings are leads, not proof.

Free / OSS · OSS/MIT · 137k GitHub stars

VerdictMIT opinionated Claude Code software factory when a solo founder wants plan→review→QA→ship roles out of the box — heavy setup and real-session browser power; pin it and audit what it can log into.

CatchBlast radius: browser skills drive your real logged-in sessions (Aside on macOS) or import cookies from Chrome/Brave/Arc into its bundled browser — treat `/setup-browser-cookies` and the sidebar agent like handing over your accounts. 135k stars in ~7 months — rank on the workflows, not the counter. Claude Code is the only “full” tier; other hosts are advisory, and outside reviews expect Codex/Claude CLIs signed in. Team mode auto-updates every session (throttled hourly) — pin if you need reproducible agents. Vs mattpocock-skills / agent-skills / superpowers: those are smaller composable packs; gstack is a whole opinionated org chart with a browser runtime.

Free / OSS · Apache-2.0 · 11.1k GitHub stars

VerdictApache-2.0 agentic vuln scanner from OpenAI. Use when you want validated findings plus patches and accept paying for the model calls.

CatchThe CLI is open source but the scanning is model calls: you sign in (`cs login`) or use an OpenAI API key in CI, so real scans cost usage — set the cost limits it documents. Needs Node 22.13+/24/26 plus Python 3.10+. Some scan tiers require separate Trusted Access for Cyber approval. Vs semgrep and trivy (deterministic rule/CVE scanners, free and fast): Codex Security is the slower LLM lane that reasons about and fixes findings — run it beside them, not instead.

Free / OSS · Apache-2.0 · 38.5k GitHub stars

VerdictApache-2.0 security scanner. Fully free CLI; Aqua Platform is the paid cousin.

CatchCLI/CI scanner — not Aqua Platform management UI/RBAC/policy SaaS. Vs Grype/Snyk: Aqua OSS default with broad target surface; Aqua Inc monetizes a separate commercial platform. You still triage and patch.

Free / OSS · OSS/MIT · 30.1k GitHub stars

VerdictMIT secrets CLI. Free forever; org Action wants free license key.

CatchMaintainer marks feature-complete (security patches; focus shifting to Betterleaks). Official Action for GitHub org repos needs a free license key from gitleaks.io — personal accounts exempt. Not a full ASVS/SAST suite. False positives need allowlists.