12 Best claude-bughunter Alternatives in 2026 (Free & Paid)
claude-bughunter is skill bundle for authorized bug hunting and external red-team work, with scope gates and reporting, priced at open source. If it is too expensive, missing a feature or simply not for you, these are the strongest alternatives we have reviewed.
1
NVIDIA's scanner for Agent Skills: finds prompt injection, exfiltration and supply-chain risks
★ 19k · +765 this week · Apache-2.0 · updated 2026-09-30
8.3/10
What it does SkillSpector is NVIDIA's open-source security scanner for Agent Skills. It answers one question before you install a skill: is this safe? Skills run inside agents with a lot of trust and little vetting. NVIDIA's research dataset found a large share of published skills with vulnerabilities, and some with malicious intent. SkillSpector inspects a skill folder, a single… Read more →
Pros
- Official NVIDIA tool used in its verified-skills pipeline
- Static plus optional LLM analysis; never executes the skill
- SARIF output, baselines and an MCP tool for gating installs
Cons
- Pattern-based scanning can yield false positives and misses
- LLM stage sends file contents to your chosen provider
Pricing: Open source · security scanner prompt-injection supply-chain mcp
2
Security auditing skills from the Trail of Bits research team
★ 7.3k · +102 this week · CC-BY-SA-4.0 · updated 2026-10-02
8.2/10
What it does This is a plugin marketplace from security firm Trail of Bits. Its skills are built for security analysis, auditing and testing work with a coding agent. The skills turn the firm's audit practice into repeatable steps. For example, they tell the agent to build context on a codebase before hunting for bugs, to check suspected findings for… Read more →
Pros
- From a respected security firm
- Practical audit workflows
Cons
- Security-focused first, with a few general development plugins
Pricing: Free · security audit
3
Agent Skills for solving CTF challenges across web, pwn, crypto, reverse, forensics and OSINT
★ 3.4k · +32 this week · MIT · updated 2026-09-13
7.0/10
What it does CTF Skills is a set of Agent Skills for solving capture-the-flag challenges. It groups techniques by category and loads the relevant one automatically from what you describe, so an agent can work through web exploitation, binary pwn, cryptography, reverse engineering, forensics, OSINT, malware analysis and miscellaneous puzzle categories. Each category skill carries concrete techniques, runnable template scripts… Read more →
Pros
- Broad category coverage with an orchestrator and writeup skill
- Ships runnable exploit templates and payload generators
- Installer with dry-run and verify modes
Cons
- Installs a large security toolchain and clones an external payload repo
- Useful mainly inside CTFs or authorized labs
Pricing: Open source · ctf agent-skills pwn crypto forensics
4
Anthropic's official collection of Agent Skills, including document, design and developer skills
★ 179k · +1.2k this week · Apache-2.0 + proprietary · updated 2026-09-29
9.2/10
What it does This is Anthropic's own public repository of Agent Skills. It serves two purposes: it ships working skills you can install today, and it is the reference for how a skill is put together. Each skill is a folder with a SKILL.md file (YAML front matter with a name and a description, then instructions), optionally joined by scripts… Read more →
Pros
- Official and well maintained
- Reference implementation of the SKILL.md format
- Covers documents, design, testing and MCP
Cons
- Some skills are examples rather than production-ready
- Document skills are source-available, not open source
Pricing: Free · official skills
5
A skills library that makes coding agents plan, test-first and debug systematically
★ 294k · +2.7k this week · MIT · updated 2026-09-27
9.0/10
What it does Superpowers, by Jesse Vincent and Prime Radiant, is a skills library that gives a coding agent a full development method rather than one-off tricks. When you start building something, the agent first asks what you are trying to achieve and shows the design in short sections for you to approve. Next it writes a detailed plan of… Read more →
Pros
- Encodes a disciplined engineering workflow
- Very popular and actively maintained
- Works beyond Claude Code
Cons
- Opinionated process can slow down tiny tasks
- Lots of skills to learn at first
Pricing: Free · tdd debugging workflow
6
Guides the agent to build distinctive, production-grade UIs instead of generic "AI-looking" designs
★ 179k · +1.2k this week · Apache-2.0 · updated 2026-09-29
8.6/10
What it does Frontend Design is one of the skills in Anthropic's official skills repository. It changes how the agent makes visual decisions when it builds or restyles a user interface. Without it, AI-built pages tend to look alike: the same card grids, soft shadows, gradient accents and stock typography. The skill tells the agent to work out the subject,… Read more →
Pros
- Noticeably better-looking UIs
- Loaded only when you build UI, so it costs little context otherwise
Cons
- Taste is subjective; you may still steer it
Pricing: Free · frontend design
7
The skills behind Claude's ability to create and edit Word, PDF, PowerPoint and Excel files
★ 179k · +1.2k this week · Proprietary (source-available) · updated 2026-09-29
8.5/10
What it does These are the four skills Anthropic uses behind Claude's ability to create and edit office files: docx for Word, pdf for PDF, pptx for PowerPoint and xlsx for Excel. Each skill tells the agent which libraries and command-line tools to use for each task, lists common mistakes, and requires a check of the output before the file… Read more →
Pros
- Production-grade document handling
- Covers the four main office formats
Cons
- Proprietary licence: use within Anthropic products, no redistribution
- Needs Python, Node, pandoc, LibreOffice and Poppler installed
Pricing: Free · documents office
8
Small, composable engineering skills: grilling, TDD, specs, tickets and architecture review
★ 274k · +4.9k this week · MIT · updated 2026-09-29
8.4/10
What it does Matt Pocock's Skills is the set of Agent Skills the TypeScript educator uses in his own daily engineering work. They are deliberately small and composable. Each one fixes a common way coding agents go wrong: misreading what you want, using too many words, writing code without feedback loops, or letting a codebase turn into a tangle. Frameworks… Read more →
Pros
- Compact, well-reasoned skills grounded in classic engineering practice
- Available in Claude Code's official plugin marketplace
- Works with any skills-compatible agent via npx skills
Cons
- Engineering skills expect a one-time setup per repo and an issue tracker
- Opinionated workflow may not suit teams already on a framework
Pricing: Open source · tdd planning architecture domain-modeling code-review
9
A skill for writing new skills: structure, descriptions and testing
★ 179k · +1.2k this week · Apache-2.0 · updated 2026-09-29
8.4/10
What it does Skill Creator is the skill in Anthropic's official repository for building new Agent Skills and improving existing ones. When you ask the agent to turn a workflow into a skill, the skill guides it through the whole job. The agent first works out what the skill should do. It then writes the SKILL.md, runs test prompts with… Read more →
Pros
- Turns repeated prompts into reusable skills
- Encodes Anthropic best practices
Cons
- Most useful after you know what to automate
Pricing: Free · skills meta
10
25 lifecycle skills and commands that make agents spec, test, review and ship with discipline
★ 100k · +1.4k this week · MIT · updated 2026-10-02
8.3/10
What it does Agent Skills, created by Addy Osmani with two collaborators, is a pack of engineering workflows for AI coding agents. It aims to stop agents from taking shortcuts such as skipping the spec, the tests or the review. The skills follow the development lifecycle in six phases: define, plan, build, verify, review and ship. Nine slash commands (/spec,… Read more →
Pros
- Covers the whole lifecycle with verification gates and anti-rationalization tables
- Native install paths documented for many agents
- Includes reviewer personas and reusable checklists
Cons
- Opinionated, process-heavy workflows can slow quick prototypes
- Single-skill npx installs omit the shared references folder
Pricing: Open source · spec-driven-development tdd code-review engineering-workflow slash-commands
11
Vercel's Agent Skills for React, Next.js, deployment and writing
★ 32k · +313 this week · MIT · updated 2026-08-28
8.3/10
What it does This is Vercel's collection of Agent Skills. It packs guidance from Vercel's engineering and design teams into skills that a coding agent loads when a task needs them. Most of the skills are rule sets the agent applies when it writes or reviews React, Next.js and UI code. Others cover writing docs, auditing a Vercel project, and… Read more →
Pros
- From the team behind Next.js
- Concrete, checkable rules
Pricing: Free · react nextjs performance
12
Teaches the agent to test local web apps with Playwright scripts
★ 179k · +1.2k this week · Apache-2.0 · updated 2026-09-29
8.2/10
What it does Web App Testing is a skill from Anthropic's official repository that teaches the agent to check a local web application with Playwright. The agent does not simply claim a UI change works. It writes a short Python Playwright script, runs it against the app in a headless Chromium browser, and then reads the results: screenshots, the rendered… Read more →
Pros
- Agent verifies its own UI changes
- No MCP server needed
Cons
- Needs Python and Playwright installed
- Its helper script runs your server commands: review them first
Pricing: Free · testing playwright