AI Plugin Indexsast-react-native alternatives
The most used alternatives to sast-react-native are security-review, slack-bot-builder, analyzing-kubernetes-audit-logs. All are security skills with an active GitHub repository, ranked below by GitHub stars and recent activity.
| # | Skill | What it does | Runs | Updated | Stars |
|---|---|---|---|---|---|
| ref | sast-react-native anurag-azure | Static application security testing guidance for React Native / TypeScript apps: secure token storage, transport security, input validation, dependency and secret hygiene. Use when reviewing RN security. | Skill | 15 days ago | 0 |
| 1 | security-review codewhale-hq | Review a change, module, or surface for exploitable defects — trust boundaries, authn/authz, injection, secret exposure, filesystem and network reach, dependency risk. Use when the user asks for a security review, audit, or vulnerability check of concrete code. Not for general code review, lint, or compliance paperwork. | Skill | today | 41k |
| 2 | slack-bot-builder sickn33 | Build Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration. | Skill | 3 days ago | 48k |
| 3 | analyzing-kubernetes-audit-logs mukul975 | Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access, and builds SIEM detection rules from the event patterns. Use when investigating a suspected cluster compromise, reconstructing what an attacker did through the API server, or writing Kubernetes-specific detection content. Keywords: audit policy, audit log, kube-apiserver, exec into pod, RBAC change, anonymous access, detection rules. Do not use for syscall-level detection inside a running container - use detecting-container-runtime-threats-with-falco. ' | Skill | 1 month ago | 35k |
| 4 | review-code verdaccio | Review a verdaccio diff, branch, or pull request against the repository review guide (security first, then npm-client compatibility, performance, product fit, maintainability), verify each finding against the code, and report actionable issues. Use for code reviews and for reviewing your own changes before or during a PR workflow. | Skill | today | 18k |
| 5 | game-server-security gmh5225 | Review multiplayer authority, RPCs, sessions, authorization, replication, inventory, economy, purchases, retries, and replay. Use when server or backend state is the security boundary. | Skill | 3 days ago | 3.6k |
| 6 | redteam-cve-lookup Netw0rkNoob | CVE lookup and applicability assessment domain card. Use after reconnaissance has identified products, versions, services, or fingerprints and red-team mode needs evidence-based CVE matching before deeper testing. | Skill | 10 days ago | 3.8k |
| 7 | reviewing-msbuild-code dotnet | Reviews MSBuild code changes using a 24-dimension methodology. Activates for code review, PR review, pull request analysis, design review, architecture review, code quality assessment, or style check of MSBuild code. Covers backwards compatibility, ChangeWave discipline, performance, allocation awareness, test coverage, error message quality, logging, string comparison, API surface, target authoring, cross-platform correctness, code simplification, concurrency, naming, SDK integration, evaluation model integrity, correctness, dependency management, security, and build infrastructure. | Skill | 3 days ago | 5.5k |
| 8 | security-sweep androoAGI | Sweep a codebase for secrets, injection, and missing permission checks — each finding demonstrated and ranked. | Skill | 6 days ago | 1.5k |
| 9 | osint-operator-specialist-methods BitterSecurity | Evidence-led osint operator technical methods and evidence interpretation for the relevant environment. | Skill | 3 days ago | 6.4k |
| 10 | piv-review-changes coleam00 | Performs a technical code review of recently changed files for bugs, security issues, and standards compliance, then writes a report. Use before committing, as a pre-commit quality gate. | Skill | 15 days ago | 714 |
| 11 | supply-chain-security microsoft | Activate when reviewing or modifying dependency resolution, lockfile schema, package downloaders, signature/integrity checks, file integration cleanup, or anything that could expose APM to dependency confusion, typosquatting, malicious packages, or token leakage. | Skill | 3 days ago | 4.1k |
| 12 | code-review vstorm-co | Review Python code for quality, security, and best practices | Skill | 3 days ago | 1.1k |
Questions
What is the best alternative to sast-react-native?
By usage, security-review is the most popular alternative, with 41k GitHub stars. The right choice depends on which features and hosting you need.
Is sast-react-native still maintained?
Its last commit was 15 days ago. You can see current activity on its listing page.