Security Audit Skill alternatives

Security Audit Skill (cloudflare/security-audit-skill): A coding-agent skill that runs multi-phase security audits on a codebase and writes machine-readable, independently verified findings. See its 4 use cases.

Similar repos

1. Agentbaseline agentbaseline/agentbaseline · Python
   Agent Baseline is a draft framework of six security outcomes and 35 controls an enterprise must evidence to run AI agents safely, kept as machine-readable YAML. Security leaders and architects writing policy for enterprise AI agents.
   3 use cases, for example Check your AI agent program against 35 controls
2. RiftX Ch1nfo/RiftX · TypeScript
   RiftX is a local TypeScript workbench that combines AI agent chat, a Playwright browser, multi-agent task coordination, and evidence capture for explicitly authorized web security testing. Web security testers and penetration testers who hold written authorization for the target and want an agent to do browser-backed validation with reviewable evidence.
   4 use cases, for example Validate web app findings with linked browser evidence
3. Hacker Elite588/Hacker · Jupyter Notebook
   Elite588/Hacker is a curated collection of cybersecurity references, scripts, tools, labs, and training material, maintained by Omar Santos as supplemental material for his books, courses, and live training. Security engineers, DFIR analysts, students, and career switchers who need organized starting points for offensive, defensive, cloud, AI, and certification work.
   5 use cases, for example Find vetted AI security references for an LLM review
4. Codex Privacy Hud inin-zou/codex-privacy-hud · Python · 109 stars
   A local-first Codex plugin that records hook observations in a session ledger, shows a privacy HUD for each session, and can deny or rewrite tool input before it runs. Developers and security-minded teams on macOS who run Codex CLI and want a local record of what their agent discloses.
   3 use cases, for example See what a Codex session discloses, live
5. Robo TTT lucidrains/robo_ttt · Python
   robo_ttt is a PyTorch implementation of RoboTTT (Jiang et al., Stanford and Nvidia), providing test-time training wrappers and memory modules for robot policy models, including optional next-latent forward dynamics. Robotics and ML researchers experimenting with test-time training in robot policies.
   3 use cases, for example Add a test-time training memory to a model
6. Forge Guardian Mah3Sec/ForgeGuardian · Go
   ForgeGuardian is a local-first, Go-based software supply chain security scanner that checks project dependencies across 9 ecosystems with 8 scan engines. Developers and security engineers who need to check a project's dependencies for known CVEs and malicious packages before shipping.
   4 use cases, for example Scan project dependencies for risks before release
7. Open Keylet omaekumiko2-create/OpenKeylet · Rust · 129 stars
   OpenKeylet is a free, local password and credential manager that gives AI agents MCP access to saved logins, API keys, SSH keys and TOTP codes without exposing hidden plaintext. Developers and operators who use Codex, Claude Code or Cursor and want agents to sign in to servers, sites and APIs without pasting secrets into the chat.
   4 use cases, for example Deploy to a server over SSH without pasting the password
8. Envlatch Raylinkh/envlatch · Swift
   EnvLatch is a native macOS Keychain launcher that stores API keys once and starts any agent, SDK, script or backend with exactly the keys it needs as ordinary environment variables. Mac developers running local agents and scripts who want API keys out of .env files without changing code.
   3 use cases, for example Launch a coding agent with only the key it needs

Best AI repos for Security and science · All use cases

Questions

Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer