1,480 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,374Claude Code6,573Data and AI3,706Backend and APIs3,486Languages3,398Planning3,181Git and workflow3,100Code review2,701Memory and context2,354Testing2,311Research2,292DevOps and cloud2,282
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| Tyleraltight/SafeExamBrowser_bypass A toolkit for running Safe Exam Browser inside a VMware virtual machine. （via IL patching） | 26 | Claude Code | 1 | 1,289 tok |
| barvhaim/HoneyMCP A Deception Security Layer for MCP Servers. It injects "ghost tools" (fake security-sensit | 25 | Claude Code, Codex, OpenCode | 2 | 4,918 tok |
| RoboFinSystems/robosystems robosystems.ai AI-native financial intelligence platform for accounting, financial reporting, and investm | 25 | Claude Code | 17 | 6,081 tok |
| fosres/SecEng-Exercises dev.to A repository of Security Engineering exercises: these exercises are designed to prepare yo | 25 | Claude Code | 1 | 1,015 tok |
| Coff0xc/CTF-MCP MCP Server for CTF challenges - 126 tools for Web/Crypto/Pwn | MCP server for CTF challeng | 25 | Claude Code | 1 | 1,460 tok |
| matteocervelli/llms Centralized LLM configuration and documentation management system. Tools for building skil | 25 | Claude Code, Codex | 39 | 347 tok |
| allsmog/vuln-scout AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 | 24 | Claude Code, Codex, OpenCode | 2 | 1,307 tok |
| tobyilee/toby-plugins Toby's personal Claude Code plugin toolkit: code analysis, TDD, Spring scaffolding, PRD ge | 24 | Claude Code | 2 | 200 tok |
| varrdinc/varrd varrd.com AI-powered trading research platform. Test any idea on stocks, futures, and crypto with ev | 24 | Claude Code | 1 | 243 tok |
| ali-master/audit audit.usestrict.dev An 8-stage AI vulnerability-discovery agent. | 24 | Claude Code, Codex | 2 | — |
| r5rana/agentware Framework that makes your LLM self-aware, loops with self-learning and persistent memory t | 24 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 34 | 4,731 tok |
| qauth-labs/qauth qauth.dev Post-quantum ready, headless-first identity platform. A developer-friendly alternative to | 24 | Claude Code, Codex, OpenCode | 30 | 1,621 tok |
| santosomar/ethical-hacking-agent-skills Ethical Hacking AI Agent Skills | 24 | Claude Code | 1 | 590 tok |
| badbread/crumbvms crumbvms.com A self-hosted, operator-grade NVR for your own security cameras: recording, motion, licens | 24 | Claude Code, Codex, OpenCode | 2 | 2,361 tok |
| fiberplane/mcp-gateway Gateway for inspecting and auditing your MCP servers | 24 | Claude Code, Codex, OpenCode | 2 | 5,849 tok |
| rayline-ai/rayline rayline.ai Open-source local router for coding agents, connecting Claude Code to cloud and local on-d | 24 | Claude Code, Codex, OpenCode | 2 | 961 tok |
| MythicAgents/sage Sage is a virtual Mythic agent that that uses an AI agentic system to operate Mythic and M | 24 | Claude Code, Codex, OpenCode | 6 | 11,687 tok |
| badchars/cve-mcp npmjs.com 23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advis | 24 | Claude Code | 1 | 845 tok |
| geoff-maddock/events-tracker arcane.city CRM and calendar to track events, weekly and monthly series, promoters, artists, producers | 24 | Claude Code | 2 | 1,137 tok |
| wangjianjq/Skill Auto agents | 23 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode | 45 | 8,297 tok |
| depalmar/ai-dfir-toolkit A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of | 23 | Claude Code, Codex | 1 | 6,013 tok |
| RobithYusuf/mcp-stealth-chrome Stealth Chrome MCP server — 100++ tools for AI agents. One-liner Cloudflare Turnstile bypa | 23 | Claude Code, Codex, OpenCode | 2 | 4,147 tok |
| puck-security/puck-scout puck.security Autonomous, read-only endpoint investigation via MCP. Ask a question about your fleet, get | 23 | Claude Code | 1 | 1,649 tok |
| crowdsecurity/crowdsec-skill CrowdSec Skill : Install, configure, debug and operate crowdsec | 23 | Claude Code | 1 | 2,401 tok |
| backbay-labs/hush hushspec.org Portable security rules for the action boundary of AI agents | 23 | Claude Code | 1 | 1,246 tok |
| fb0sh/pentester An automated penetration testing framework based on AI agents, strictly following the PTES | 23 | Claude Code, Codex | 58 | — |
| igorbarshteyn/glasswing-open A proof-of-concept agentic scaffold attempting to replicate Claude Mythos Preview's cyber | 23 | Claude Code | 1 | 20,859 tok |
| ty13r/substack-mcp-plus The most advanced Substack MCP server. 12 tools, browser auth, rich text support. Not affi | 23 | Claude Code | 1 | 2,882 tok |
| GSA-TTS/agentic-coding-playbook Practical, tool-agnostic playbook for federal employees building software with AI coding a | 23 | Claude Code, Codex, OpenCode | 13 | 10,717 tok |
| afiqiqmal/claude-security-audit Claude Code slash command for white-box security auditing with OWASP Top 10:2025 and NIST | 23 | Claude Code | 1 | 828 tok |
| gromhacks/bonsai-ninja 🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compil | 23 | Claude Code, Codex, OpenCode | 2 | 6,007 tok |
| Elnora-AI/elnora-ai-agent-hackathon-starter-kit Run one command, follow the instructions, and get your first AI agents up and running — Cl | 22 | Claude Code, Codex, OpenCode | 3 | 3,892 tok |
| ducnguyen67201/FeatherlaneAI featherlane.ai Real-time guardrail runtime for AI agents. | 22 | Claude Code, Codex, OpenCode | 2 | 4,375 tok |
| atlanhq/atlan-python docs.atlan.com Official Python SDK for the Atlan 💙 | 22 | Claude Code, Codex, OpenCode | 6 | 1,222 tok |
| Correia-jpv/fucking-awesome-web-security 🐶 A curated list of Web Security materials and resources. With repository stars⭐ and fork | 22 | Claude Code | 1 | 3,273 tok |
| fdhhhdjd/Class-Production-AI-App 🏗️ Production-ready AI app structure — RAG pipeline, hybrid search, self-correcting agent | 22 | Claude Code, Codex, OpenCode | 2 | 776 tok |
| zilbonn/OWASP-WSTG-Rag OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code | 22 | Claude Code | 1 | 1,063 tok |
| mrFlick72/vauthenticator VAuthenticator OpenID Connect/OAuth2.1 Auth server | 22 | Claude Code, Codex, OpenCode | 2 | 207 tok |
| pandysp/openclaw-infra Secure self-hosted OpenClaw deployment on Hetzner Cloud with Tailscale | 22 | Claude Code, Codex | 1 | 7,404 tok |
| ModelContextProtocol-Security/mcpserver-audit mcpserver-audit: Helps you check if MCP servers are safe before using them. Examines serve | 22 | Claude Code | 1 | 1,502 tok |
| spaquet/gemtracker gemtracker-website.spaquet74.workers.dev Quickly track and analyze your ruby gem dependencies | 22 | Claude Code | 2 | 2,613 tok |
| VincentChuWaiChow/vanguard-frontier-agentic Curated marketplace of AI skills, agents, and rules for cloud, zero-trust, and compliance- | 22 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 5,843 tok |
| ZealynxSecurity/krait krait.zealynx.io Claude Code skills for Solidity security auditing. 90% precision across 40 blind Code4rena | 21 | Claude Code | 1 | 3,754 tok |
| DinoMorphica/safeclaw safeclaw.io Security Dashboard for OpenClaw AI Agents - intercept, monitor, and control what OpenClaw | 21 | Claude Code | 4 | — |
| waybarrios/cyber-agent AI-powered penetration testing with Claude Code agents. RedTeam Barranquilla - Automating | 21 | Claude Code | 3 | 1,477 tok |
| FlechetteLabs/Tollbooth flechettelabs.com A transparent proxy system for inspecting, debugging, and modifying any traffic from the a | 21 | Claude Code | 1 | 1,086 tok |
| gaspareduard/Omada-mcp Security-first MCP server for TP-Link Omada, with a stdio-first runtime, capability-gated | 21 | Claude Code, Codex, OpenCode | 3 | 2,700 tok |
| manthanpatelll/claude-code-starter A clean, copy-paste .claude/ setup for Claude Code. Hooks, skills, agents, rules, plugins, | 21 | Claude Code | 13 | 394 tok |
| gabrielmaialva33/camera-hack 🔓 Root shell + persistent hack on a Yoosee/Jortan IP camera (Anyka AK3918EV330) via UART | 21 | Claude Code | 1 | 468 tok |
| natea/ExoMind Highly skilled voice-based assistant with intimate knowledge of your preferences, interest | 21 | Claude Code | 6 | 3,282 tok |