Agent Skills comparison

Best Open-Source Agent Skills: Open Code Review vs Vercel Skills

A data-backed comparison of the top two agent skills on HVTracker, built from public trust signals rather than stars alone.

August 11, 2026 · 4 min read · Data updated 2026-11-10 04:07 UTC

Short answer: Open Code Review currently leads Vercel Skills on HVTracker's evidence-weighted trust score: 94.0 vs 90.8/100. This is not a popularity ranking; it combines supply-chain safety, identity/provenance, transparency, maintenance, and adoption signals.

Open Code Review

94.0
#1 overall · #1 in Agent Skills · Grade A

Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

Repositoryalibaba/open-code-review
Stars49.7k
Last push2026-11-10
Weekly commits51
Weekly downloads174,168

Vercel Skills

90.8
#2 overall · #2 in Agent Skills · Grade A

The open agent skills tool - npx skills

Repositoryvercel-labs/skills
Stars38.8k
Last push2026-11-10
Weekly commits86
Weekly downloads5,016,852

Open Code Review vs Vercel Skills: trust signal breakdown

Both projects are tracked in the Agent Skills category, but they do not expose the same evidence. The table below compares the public signals that feed HVTrust.

SignalOpen Code ReviewVercel Skills
HVTrust score94.090.8
Safety / Integrity21.9/2518.4/25
Identity / Provenance18.0/1818.0/18
Transparency14.9/1712.5/17
Maintenance18.8/2019.7/20
Adoption18.3/2019.9/20
OSSF Scorecard7.54.7
Signed commits100%100%
Package provenanceVerifiedVerified

Which one should you evaluate first?

If your priority is the most verifiable trust profile today, start with Open Code Review. It has the stronger current HVTrust score and ranks higher in Agent Skills. If your use case depends on a specific runtime, language, license, or integration model, use the individual profiles rather than the headline score alone.

For production use, the practical checklist is: inspect the security policy, confirm package provenance or release signing where available, review recent maintenance cadence, and compare the exact trust breakdown. HVTracker is meant to reduce the first-pass research burden, not replace your own risk review.