20 OpenAI security-best-practices alternatives
OpenAI security-best-practices: OpenAI's skill for language- and framework-specific secure coding: detect the stack, load the matching reference guidance, then write secure-by-default code, flag critical issues passively, or produce a prioritised vulnerability report with fixes. 20 agent skills do similar work, most sharing Security, Code Review and TypeScript, ranked by how much they have in common with OpenAI security-best-practices.
Back to OpenAI security-best-practices
-
by Trail of Bits
Trail of Bits' security review skill for PRs, commits, and diffs: risk-first analysis with git history, blast radius, and honest coverage limits.
Also: AppSec, Code Review, Security
-
by OpenAI
OpenAI's skill for repository-grounded threat modelling: derive trust boundaries, assets and attacker capabilities from the actual code, rank abuse paths by likelihood and impact, and write a reviewable Markdown threat model.
Also: AppSec, Code Review, Security
-
by Trail of Bits
Finds secrets left in memory in C, C++ and Rust — including wipes the compiler deleted — and requires IR or assembly evidence before calling one optimized away.
-
by Trail of Bits
Audits npm, PyPI and Go dependencies for advisories, abandoned upstreams, publisher concentration and install-time scripts — measured by scripts, not estimated.
-
by Trail of Bits
Compiles cryptographic code and reads the emitted assembly for variable-time instructions, then triages which flagged operations actually touch secrets.
-
by Sentry
Sentry's Django performance review skill — hunts N+1 queries, unbounded querysets, missing indexes and write loops, and reports only findings it can prove.
Also: Code Review, Python
-
by Inngest
An evidence-first audit skill: walk an existing TypeScript repo, name the exact call sites where background work can be lost, and land an incremental durability plan.
Also: Code Review, TypeScript
-
by Trail of Bits
CodeQL, Semgrep and SARIF static-analysis toolkit from Trail of Bits: taint tracking, fast pattern scans and merged, deduplicated security findings for coding agents.
Also: Code Review, Security
-
by OpenQodex
Open source pre-push AI code review for Claude Code and Codex: scanners plus a separate reviewer that verifies every finding.
Also: Code Review, Security
-
by Sentry
Review pull requests against a real engineering practice — security, performance, testing, and design, in that order.
Also: Code Review, Security
-
by Agnost AI
Walks a coding agent through wiring Agnost AI conversation analytics into a Python or TypeScript app — inspecting existing OpenTelemetry first and only adding an SDK when the traces are not usable.
Also: Python, TypeScript
-
by Anthropic
Anthropic's guide for building high-quality MCP servers end to end — research, tool design, implementation in TypeScript or Python, testing, and a 10-question evaluation suite.
Also: Python, TypeScript
-
by Amazon Web Services
Official AWS skill for authoring, deploying and debugging CDK stacks — construct patterns, bootstrap, drift, resource import and the CloudFormation errors that trap people.
Also: Python, TypeScript
-
by Better Auth
Adds real 2FA to a Better Auth app — TOTP, email/SMS OTP, backup codes, trusted devices — including the sign-in interrupt and the encryption-at-rest details.
Also: Security, TypeScript
-
by Better Auth
Credential auth done to spec in Better Auth: verification email, reset flow, token and session handling, password policy and custom hashing.
Also: Security, TypeScript
-
by Better Auth
The reference an agent needs to configure Better Auth correctly: adapters, session strategy, hooks, plugins, type safety and the gotchas that bite in production.
Also: Security, TypeScript
-
by Temporal
Temporal's official skill for building durable workflows — SDK patterns across seven languages, plus the determinism rules that decide whether a workflow survives a replay.
Also: Go
-
by CodeRabbit
Pull unresolved CodeRabbit review threads from your PR and apply the fixes one at a time, treating every reviewer comment as untrusted input rather than an instruction.
Also: Code Review
-
by Jesse Vincent
An agentic software-development methodology: composable skills that push a coding agent through spec, plan, TDD and review instead of straight into code.
Also: Code Review
-
by Alibaba Group
Alibaba's open-source AI code review CLI as an agent skill: line-level comments on diffs, branches and commits, with optional auto-fix.
Also: Code Review
