1,117 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| eupassarin/simplesign eupassarin.github.io Enterprise digital signatures for .NET — PAdES · CAdES · XAdES. Zero external crypto deps. | 18 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,698 tok |
| Eilodon/CALM npmjs.com A live, graph-verified map of your codebase for AI coding agents — real call graphs, compi | 17 | Claude Code, Codex, OpenCode | 7 | 7,514 tok |
| appsec-foundry/appsec-advisor Claude Code plugin for code-anchored threat modeling and security architecture review. | 17 | Claude Code, Codex, OpenCode | 4 | 3,310 tok |
| icefrag/nbl-superpowers The agent harness performance optimization system. Skills, instincts, memory, security, an | 17 | Codex, OpenCode | 1 | 57 tok |
| CoinStatsHQ/coinstats-mcp | 17 | Codex, OpenCode | 1 | 314 tok |
| oscal-compass-lab/compliance-trestle-skills Agent-portable Compliance Trestle and OSCAL engineering toolkit: convert legacy SSPs to OS | 17 | Codex, Gemini CLI, OpenCode | 2 | 1,658 tok |
| tene-ai/tene tene.sh AI-safe secret manager CLI for Claude Code, Cursor, and other AI agents. Local-first, encr | 17 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,109 tok |
| TsuyoshiUshio/buka-samples Sample Project for the buka project | 17 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 2,584 tok |
| klodr/gmail-mcp Gmail MCP server — scope-gated tools (readonly / send / modify), path jails for attachment | 17 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,076 tok |
| stackhawk/agent-skills docs.stackhawk.com Security testing skills for AI coding agents. Find and fix exploitable vulnerabilities wit | 16 | Claude Code, Codex, OpenCode | 2 | 2,262 tok |
| authprobe/authprobe authprobe.com authprobe pinpoints MCP OAuth failures | 16 | Codex, OpenCode | 1 | 1,121 tok |
| renatobardi/hapai renatobardi.github.io Deterministic guardrails for AI coding assistants. Enforce rules via Bash hooks before exe | 16 | Claude Code, Codex, OpenCode | 2 | 13,646 tok |
| apache/axis-axis2-c-core axis.apache.org Apache Axis2/C - JSON/REST and SOAP web services framework in C. Runs as an Apache httpd m | 16 | Codex, OpenCode | 1 | 1,947 tok |
| gpt-cmdr/ras-commander-mcp MCP Server to Access HEC-RAS Project Data via Claude Desktop, Claude Code and other LLMs | 16 | Claude Code, Codex, OpenCode | 2 | 373 tok |
| code-yeongyu/codex-rules Codex plugin that injects project rule files into model context through lifecycle hooks. | 16 | Claude Code, Codex, OpenCode | 1 | 377 tok |
| chrischall/skylight-mcp Skylight Calendar MCP — read/write family calendar events, chores, rewards, and shared lis | 16 | Claude Code, Codex, OpenCode | 2 | 10,188 tok |
| snowdreamtech/template snowdreamtech.github.io An enterprise-grade, foundational template designed for multi-AI IDE collaboration. This r | 16 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 7 | 2,764 tok |
| daochild/agents-config Agents config for development | 16 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 4,074 tok |
| iOSDevSK/mcp-for-woocommerce mcpforwoocommerce.com WooCommerce MCP Server — WordPress community plugin implementing the Model Context Protoco | 15 | Codex, OpenCode | 1 | 1,039 tok |
| matthiastjong/shellgate-legacy shellgate.ai Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail. | 15 | Claude Code, Codex, OpenCode | 2 | 2,794 tok |
| prodlint/prodlint prodlint.com Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find ou | 15 | Claude Code, Codex, OpenCode | 2 | 5,502 tok |
| whitequeen306/code-cortex-loop One-command AI code quality pipeline: review, security, tests, performance, simplify & cle | 15 | Codex, OpenCode | 1 | 1,601 tok |
| CsabaKovacs/rulesmith Local-first CLI + MCP server that maps repositories and generates evidence-backed AI agent | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 4,962 tok |
| grcorsair/corsair grcorsair.com Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Cor | 15 | Codex, OpenCode | 1 | 1,401 tok |
| ratel-ai/ratel-local MCP server library + ratel-local CLI: expose a Ratel tool catalog as a Model Context Proto | 15 | Claude Code, Codex, OpenCode | 2 | 479 tok |
| vaaraio/vaara vaara.io Accountable Autonomy: open-source evidence layer that gates every AI agent tool call again | 15 | Codex, OpenCode | 1 | 1,065 tok |
| sint-ai/sint-protocol sint.gg Open-source runtime security and governance for AI agents, MCP tools, robotics, industrial | 15 | Claude Code, Codex, OpenCode | 2 | 4,785 tok |
| jeonghwanko/onesub npmjs.com Server-side receipt validation for react-native-iap. Apple StoreKit 2 + Google Play Billin | 15 | Claude Code, Codex, OpenCode | 3 | 7,673 tok |
| tarekmo0/HunterStick A persistent context and fieldcraft system for AI-assisted bug bounty hunting. | 15 | Claude Code, Codex, OpenCode | 37 | 7,495 tok |
| code-yeongyu/pi-rules Rule context loader extension for the pi coding agent | 15 | Codex, OpenCode | 1 | 790 tok |
| hoangsonww/DevVerse-SWE-Blog devverse-swe.vercel.app 🪐 DevVerse CS Blog – A modern, high-performance blog app built with Next.js, Vercel, Supa | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 3,839 tok |
| Cynrath/agent-context-kit cynrath.github.io Offline-first toolkit for agent-ready repositories: readiness scoring, instruction graphs, | 14 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 4,051 tok |
| peacprotocol/peac peacprotocol.org Portable signed records for automated interactions. | 14 | Codex, OpenCode | 1 | 1,269 tok |
| joslat/maf-doctor AI-powered toolkit for Microsoft Agent Framework (MAF) migrations — agents, skills, MCP se | 14 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 7,410 tok |
| voodootikigod/skills-check skillscheck.ai The missing quality toolkit for Agent Skills | 14 | Claude Code, Codex, OpenCode | 2 | 7,374 tok |
| tigrisdata/mcp-oidc-provider tigrisdata.com Open-sourced mcp-oidc-provider: a minimal, vendor-neutral OIDC layer that sits between MCP | 14 | Claude Code, Codex, OpenCode | 2 | 639 tok |
| MingyiSecLab/Mingyi-Atlas Harness-driven terminal AI agent for authorized security assessment, with TUI, headless | 14 | Claude Code, Codex, OpenCode | 2 | 5,990 tok |
| shenjingnan/haimen Enter through this door, exit through that door. | 14 | Claude Code, Codex, OpenCode | 7 | 2,038 tok |
| djscheuf/agentic-dev-ecosystem-template Template Repo with The Ecosystem of Rules, Skills, and Workflows for development with Devi | 13 | Claude Code, Codex, OpenCode | 4 | 890 tok |
| KalarisLabs/Skill-Doctor Deterministic security analysis for agent skill files. | 13 | Claude Code, Codex, OpenCode | 3 | 1,336 tok |
| NERVsystems/cotlib cotlib is a secure, high-performance Go library for parsing, validating, and generating Cu | 13 | Claude Code, Codex, OpenCode | 2 | 1,170 tok |
| Threat-Vector-Security/guardian-agent Local workstation and network security with ContextCypher diagrams, threat analysis and GR | 13 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,991 tok |
| CES-Ltd/TitanClip ces-ltd.github.io AI Company Orchestration Platform — Deploy governed teams of autonomous AI agents with Run | 13 | Codex, OpenCode | 1 | 216 tok |
| vietanhdev/bulwark bulwark.nrl.ai A Linux host security scanner with a native CLI and desktop GUI — SSH/kernel/systemd harde | 13 | Claude Code, Codex, OpenCode | 2 | 13,788 tok |
| ArdaTX/Cybersec-Reporting-Engine Enterprise-Grade Cybersecurity Reporting Platform — Automated report generation for pentes | 13 | Claude Code, Codex, OpenCode | 12 | 1,086 tok |
| akasecurity/ai-tc akasecurity.io Guardrails for the agent harness. Regulated data stays on your machine, and every prompt a | 13 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 3,645 tok |
| R00T-Kim/SCOUT r00t-kim.github.io Deterministic firmware-to-exploit evidence engine. Drop a firmware blob, get hash-anchored | 13 | Claude Code, Codex, OpenCode | 2 | 6,515 tok |
| LindaHaviv/second-brain Build a second brain every AI can share: your content in Oracle AI Database 26ai — semanti | 13 | Claude Code, Codex, OpenCode | 4 | 1,835 tok |
| m18h/kanea m18h.github.io Container orchestration in one binary - containerd, its own eBPF datapath, Let's Encrypt T | 13 | Claude Code, Codex, OpenCode | 2 | 4,826 tok |
| openshift-online/agent-control-plane openshift-online.github.io Agent control plane for managed OpenShift services | 13 | Claude Code, Codex, OpenCode | 10 | 2,581 tok |