1,170 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| pluginslab/wp-agentic-kit pluginslab.com Starter kit for agentic WordPress development. CLAUDE.md/AGENTS.md templates, the wordpres | 20 | Claude Code, Codex, OpenCode | 8 | 3,997 tok |
| 0xwi11iam/Suijin Suijin is an open-source fully autonomous red teaming / web app pentesting framework for A | 20 | Codex, OpenCode | 1 | 887 tok |
| AgentSafe-AI/tooltrust-scanner tooltrust.dev Security scanner for AI agent tool definitions | 19 | Claude Code, Codex | 2 | 183 tok |
| Bugb-Technologies/guardlink guardlink.bugb.io AI-maintained security annotations for code. Continuous threat modeling, enforced in CI. | 19 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 3,361 tok |
| gleanwork/mcp-server-tester Playwright-based testing and eval framework for MCP servers with LLM-as-a-judge | 19 | Claude Code, Codex, OpenCode | 3 | 7,253 tok |
| safe-agentic-world/nomos Deny-wins policy hook for Claude Code and Codex. Checks every shell, file, and fetch call | 19 | Claude Code, Codex, OpenCode | 2 | 2,832 tok |
| ssdeanx/secure-rag-multi-agent deanmachines.com Secure Retrieval-Augmented Generation (RAG) with role-based access control using Mastra AI | 19 | Codex, GitHub Copilot, OpenCode | 3 | 15,972 tok |
| staticroostermedia-arch/engram glama.ai Geometric agent memory for Agents: 8-tool lean contract, harness injection at wake, sessio | 19 | Claude Code, Codex, OpenCode | 2 | 3,188 tok |
| snyk-labs/toxicskills-goof ToxicSkills - malicious agent skills in openclaw / clawhub / agent supply chain | 19 | Claude Code, Codex, Gemini CLI | 6 | — |
| kingggg5/shipproof shipproof-site.sjet2744.chatgpt.site Evidence-first Codex, Claude plugin for bugs, security, and 10k-to-1M-user scale readiness | 19 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,055 tok |
| clouisle/Clouisle clouisle.asia Next-Generation Multi-Agent Collaboration Platform and Workflow Engine. Build and orchestr | 19 | Claude Code, Codex, OpenCode | 2 | 1,017 tok |
| AppliedIR/sift-mcp appliedir.github.io Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal | 19 | Codex, OpenCode | 1 | 2,528 tok |
| open-mcp-ai/termcp Not only an MCP that lets AI act like a human at the terminal — also a cross-platform AI-N | 19 | Claude Code, Codex, OpenCode | 2 | 1,071 tok |
| spences10/mcp-turso-cloud 🗂️ A Model Context Protocol (MCP) server that provides integration with Turso databases f | 18 | Claude Code, Codex, OpenCode | 2 | 259 tok |
| ajipurn/fida fida.my.id a local-first secret leak prevention layer for AI coding agents | 18 | Codex, OpenCode | 1 | 129 tok |
| ashlrai/phantom-secrets phm.dev Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secret | 18 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 6,798 tok |
| alifanov/scopegate scopegate.dev AI Access Proxy Layer — granular permission gateway for AI agents. Connect services, defin | 18 | Claude Code, Codex | 4 | 7,613 tok |
| ZarK/ai-supply-chain-guard Tool-agnostic Agent Skill for dependency supply-chain defense | 18 | Codex, OpenCode | 1 | 298 tok |
| adcontextprotocol/adcp-client adcontextprotocol.github.io A Typescript SDK for the AdCP protocol (client and server) | 18 | Claude Code, Codex, GitHub Copilot, OpenCode | 37 | 12,553 tok |
| seekskyworld/cloud-agent | 18 | Codex, OpenCode | 1 | 938 tok |
| eupassarin/simplesign eupassarin.github.io Enterprise digital signatures for .NET — PAdES · CAdES · XAdES. Zero external crypto deps. | 18 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,698 tok |
| Eilodon/CALM npmjs.com A live, graph-verified map of your codebase for AI coding agents — real call graphs, compi | 17 | Claude Code, Codex, OpenCode | 7 | 7,514 tok |
| appsec-foundry/appsec-advisor Claude Code plugin for code-anchored threat modeling and security architecture review. | 17 | Claude Code, Codex, OpenCode | 4 | 3,310 tok |
| icefrag/nbl-superpowers The agent harness performance optimization system. Skills, instincts, memory, security, an | 17 | Codex, OpenCode | 1 | 57 tok |
| CoinStatsHQ/coinstats-mcp | 17 | Codex, OpenCode | 1 | 314 tok |
| tene-ai/tene tene.sh AI-safe secret manager CLI for Claude Code, Cursor, and other AI agents. Local-first, encr | 17 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,109 tok |
| TsuyoshiUshio/buka-samples Sample Project for the buka project | 17 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 2,584 tok |
| mondoohq/skillcheck skillcheck.run Scan your machine for malicious AI agent skills — supports Claude Code, OpenAI Codex, and | 17 | Codex, OpenCode | 1 | 528 tok |
| stackhawk/agent-skills docs.stackhawk.com Security testing skills for AI coding agents. Find and fix exploitable vulnerabilities wit | 16 | Claude Code, Codex, OpenCode | 2 | 2,262 tok |
| authprobe/authprobe authprobe.com authprobe pinpoints MCP OAuth failures | 16 | Codex, OpenCode | 1 | 1,121 tok |
| renatobardi/hapai renatobardi.github.io Deterministic guardrails for AI coding assistants. Enforce rules via Bash hooks before exe | 16 | Claude Code, Codex, OpenCode | 2 | 13,646 tok |
| oscal-compass-lab/compliance-trestle-skills Agent-portable Compliance Trestle and OSCAL engineering toolkit: convert legacy SSPs to OS | 16 | Codex, Gemini CLI, OpenCode | 2 | 1,658 tok |
| apache/axis-axis2-c-core axis.apache.org Apache Axis2/C - JSON/REST and SOAP web services framework in C. Runs as an Apache httpd m | 16 | Codex, OpenCode | 1 | 1,947 tok |
| gpt-cmdr/ras-commander-mcp MCP Server to Access HEC-RAS Project Data via Claude Desktop, Claude Code and other LLMs | 16 | Claude Code, Codex, OpenCode | 2 | 373 tok |
| code-yeongyu/codex-rules Codex plugin that injects project rule files into model context through lifecycle hooks. | 16 | Claude Code, Codex, OpenCode | 1 | 377 tok |
| klodr/gmail-mcp Gmail MCP server — scope-gated tools (readonly / send / modify), path jails for attachment | 16 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,076 tok |
| chrischall/skylight-mcp Skylight Calendar MCP — read/write family calendar events, chores, rewards, and shared lis | 16 | Claude Code, Codex, OpenCode | 2 | 10,188 tok |
| snowdreamtech/template snowdreamtech.github.io An enterprise-grade, foundational template designed for multi-AI IDE collaboration. This r | 16 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 7 | 2,764 tok |
| daochild/agents-config Agents config for development | 16 | Claude Code, Codex, OpenCode | 15 | 4,290 tok |
| iOSDevSK/mcp-for-woocommerce mcpforwoocommerce.com WooCommerce MCP Server — WordPress community plugin implementing the Model Context Protoco | 15 | Codex, OpenCode | 1 | 1,039 tok |
| matthiastjong/shellgate-legacy shellgate.ai Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail. | 15 | Claude Code, Codex, OpenCode | 2 | 2,794 tok |
| prodlint/prodlint prodlint.com Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find ou | 15 | Claude Code, Codex, OpenCode | 2 | 5,337 tok |
| whitequeen306/code-cortex-loop One-command AI code quality pipeline: review, security, tests, performance, simplify & cle | 15 | Codex, OpenCode | 1 | 1,601 tok |
| CsabaKovacs/rulesmith Local-first CLI + MCP server that maps repositories and generates evidence-backed AI agent | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 4,962 tok |
| grcorsair/corsair grcorsair.com Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Cor | 15 | Codex, OpenCode | 1 | 1,401 tok |
| ratel-ai/ratel-local MCP server library + ratel-local CLI: expose a Ratel tool catalog as a Model Context Proto | 15 | Claude Code, Codex, OpenCode | 2 | 479 tok |
| vaaraio/vaara vaara.io Accountable Autonomy: open-source evidence layer that gates every AI agent tool call again | 15 | Codex, OpenCode | 1 | 1,065 tok |
| sint-ai/sint-protocol sint.gg Open-source runtime security and governance for AI agents, MCP tools, robotics, industrial | 15 | Claude Code, Codex, OpenCode | 2 | 4,785 tok |
| jeonghwanko/onesub npmjs.com Server-side receipt validation for react-native-iap. Apple StoreKit 2 + Google Play Billin | 15 | Claude Code, Codex, OpenCode | 3 | 7,673 tok |
| tarekmo0/HunterStick A persistent context and fieldcraft system for AI-assisted bug bounty hunting. | 15 | Claude Code, Codex, OpenCode | 37 | 7,495 tok |