1,480 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,374Claude Code6,573Data and AI3,706Backend and APIs3,486Languages3,398Planning3,181Git and workflow3,100Code review2,701Memory and context2,354Testing2,311Research2,292DevOps and cloud2,282
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| woohyun212/security-skill A collection of AI agent skills for security professionals, by security professionals, and | 21 | Claude Code, Codex, OpenCode | 2 | 1,284 tok |
| badchars/cloud-audit-mcp Cloud security audit tools for AI agents — AWS, Azure, GCP misconfiguration detection via | 21 | Claude Code | 1 | 757 tok |
| TheLobbi/claude thelobbi.github.io | 21 | Claude Code | 9 | — |
| Trivo25/code-airlock trivo25.github.io Run Claude Code (or another coding agent) unattended, inside a disposable microVM, with it | 20 | Claude Code, Codex, OpenCode | 2 | 288 tok |
| algorismo-au/lanekeep Governance guardrails and insights for AI coding agents | 20 | Claude Code | 1 | 1,196 tok |
| pantheraudits/move-auditor pantheraudits.com Skill for move smart contract security auditing. | 20 | Claude Code, Codex, OpenCode | 2 | 1,607 tok |
| ogrodev/fsociety Multi-plugin marketplace for Claude Code offensive security plugins | 20 | Claude Code | 1 | 2,310 tok |
| dfradehubs/agentgram agentgram.eu A single front door for all your AI agents and MCPs | 20 | Claude Code | 14 | 1,457 tok |
| x746b/winforensics-mcp A comprehensive MCP server for Windows digital forensics on KALI Linux | 20 | Claude Code | 1 | 3,006 tok |
| mnvsk97/agentbreak infrastructure chaos to test the resilience of ai agents | 20 | Claude Code | 1 | 155 tok |
| simple10/openclaw-stack Deploy a secure OpenClaw to any VPS using Claude Code. | 20 | Claude Code | 4 | 1,740 tok |
| tower/agentic-data-engineering Repository with a skills boilerplate for agentic data engineering workflows | 20 | Claude Code, Codex, OpenCode | 5 | 1,154 tok |
| Njones17/AI-agent-master-cyber-skills-list The most comprehensive cybersecurity skill pack for AI coding agents — 741 skills spanning | 20 | Claude Code | 1 | 3,089 tok |
| thejefflarson/soundcheck Simple security reviews for AI agents | 20 | Claude Code | 62 | 2,821 tok |
| pierreb-devkit/Node weareopensource.me :computer: Node - Boilerplate Back : Express, Jwt, Mongo, Sequelize | 20 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 2,293 tok |
| aldegad/safedeps npmjs.com Dependency safety gate for Claude Code & Codex CLI — OSV pre-approval, npm lockfile-closur | 20 | Claude Code, Codex, OpenCode | 2 | 4,254 tok |
| ashfordeOU/grasp ashfordeou.github.io GRASP — Code architecture visualizer + 150-tool MCP server. Dependency graphs, security sc | 20 | Claude Code | 1 | 2,658 tok |
| claude-code-expert/example Collection of Claude Code configuration and Markdown examples | 19 | Claude Code | 6 | — |
| hoophq/fence hoop.dev Guardrails for AI coding agents — block catastrophic tool calls before they run. Semantic, | 19 | Claude Code | 1 | 1,815 tok |
| fortify/skills opentext.com AI agent skills for OpenText Fortify — SAST/DAST/SCA scanning, vulnerability triage, remed | 19 | Claude Code, GitHub Copilot | 1 | 1,613 tok |
| AgentSafe-AI/tooltrust-scanner tooltrust.dev Security scanner for AI agent tool definitions | 19 | Claude Code | 1 | 183 tok |
| akanthed/SecureAI-Scan npmjs.com Find AI/LLM security vulnerabilities in your code before attackers do — covers prompt inje | 19 | Claude Code | 1 | 4,552 tok |
| Bugb-Technologies/guardlink guardlink.bugb.io AI-maintained security annotations for code. Continuous threat modeling, enforced in CI. | 19 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 14,736 tok |
| sinewaveai/prooflayer-rules proof-layer.com Open-source runtime security rules engine for MCP servers and AI agents. Detects prompt in | 19 | Claude Code | 1 | 1,938 tok |
| snyk-labs/toxicskills-goof ToxicSkills - malicious agent skills in openclaw / clawhub / agent supply chain | 19 | Claude Code, Codex, Gemini CLI | 6 | — |
| SkyShannonProver/shannon-prover skyshannonprover.github.io LLM agents that write machine-checked cryptographic proofs in EasyCrypt (arXiv:2607.02847) | 19 | Claude Code, Codex, OpenCode | 4 | 2,653 tok |
| safe-agentic-world/nomos Secure every action your AI agents take (Claude Code, Codex, MCP). Blocks secret access, g | 18 | Claude Code, Codex, OpenCode | 2 | 2,211 tok |
| pluginslab/wp-agentic-kit pluginslab.com Starter kit for agentic WordPress development. CLAUDE.md/AGENTS.md templates, the wordpres | 18 | Claude Code, Codex, OpenCode | 8 | 3,997 tok |
| aiconnai/agentshield aiconnai.github.io 🛡️ The security firewall for AI agent tools & MCP servers (Claude, GPT-5.6, Gemini 3.7, A | 18 | Claude Code, Codex, OpenCode | 2 | 7,115 tok |
| openfused/openfused openfused.dev OpenFused is a shared memory and messaging layer for AI agents, built on plain files. It | 18 | Claude Code | 1 | 1,533 tok |
| vigil-agency/vigil vigil.agency The Security Agency That Never Sleeps — AI-powered security operations platform | 18 | Claude Code | 1 | 580 tok |
| eddiesanjuan/markupr markupr.com Give your AI coding agent eyes and ears. Screen + voice capture → structured Markdown. MCP | 18 | Claude Code | 10 | 2,979 tok |
| staticroostermedia-arch/engram glama.ai Geometric agent memory for Agents: 8-tool lean contract, harness injection at wake, sessio | 18 | Claude Code, Codex, OpenCode | 2 | 3,188 tok |
| tahirraufkeeyu/software-development-agent-stack--sdas Turn Claude into your team's teammate — 50 ready-to-install skills for engineering, securi | 18 | Claude Code | 1 | — |
| nexus-substrate/nexus-agents nexus-substrate.github.io Governance substrate for your AI coding agents — adversarial review, drift-detected rules, | 18 | Claude Code, Codex, Gemini CLI, OpenCode | 7 | 26,414 tok |
| kingggg5/shipproof shipproof-site.sjet2744.chatgpt.site Evidence-first Codex, Claude plugin for bugs, security, and 10k-to-1M-user scale readiness | 18 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,055 tok |
| callobuzz/cob-shopify-mcp callobuzz.com Production-grade MCP server and CLI tool for Shopify Admin GraphQL API — 49+ tools, YAML-e | 18 | Claude Code | 1 | 1,927 tok |
| narosemena/master-instructional-design A Claude skill embodying a 30-year veteran ID practitioner — 15 engagement modes, 31 refer | 18 | Claude Code, Gemini CLI | 6 | 2,406 tok |
| Liberty91LTD/cti-skills liberty91.com Cyber Threat Intelligence Skills for each stage of the CTI Lifecycle. | 17 | Claude Code, Codex, OpenCode | 4 | 2,048 tok |
| clouisle/Clouisle clouisle.asia Next-Generation Multi-Agent Collaboration Platform and Workflow Engine. Build and orchestr | 17 | Claude Code, Codex, OpenCode | 2 | 529 tok |
| aveproject/ave aveproject.org AVE - Agentic Vulnerability Enumeration. The behavioral classification standard for agenti | 17 | Claude Code | 14 | 1,671 tok |
| flagify-com/soar-mcp SOAR MCP Server is an innovative security orchestration platform integration solution that | 17 | Claude Code | 1 | 1,618 tok |
| R-s0n/rs0n-bug-bounty-mcp-server An MCP (Model Context Protocol) server that gives Claude Code access to a comprehensive bu | 17 | Claude Code | 1 | 430 tok |
| tiluckdave/hound-mcp npmjs.com The dependency bloodhound for AI coding agents. Free, no API keys. | 17 | Claude Code | 1 | 1,703 tok |
| XZXZZX-Ai/bilibili-mcp Bilibili MCP tool A Bilibili MCP server | 17 | Claude Code, Codex, OpenCode | 14 | 1,197 tok |
| jhlee111/ash_grant Permission-based authorization extension and dev tools for Ash Framework | 17 | Claude Code | 4 | 2,346 tok |
| Eilodon/CALM npmjs.com A live, graph-verified map of your codebase for AI coding agents — real call graphs, compi | 16 | Claude Code, Codex, OpenCode | 7 | 7,514 tok |
| appsec-foundry/appsec-advisor Claude Code plugin for code-anchored threat modeling and security architecture review. | 16 | Claude Code, Codex, OpenCode | 4 | 1,845 tok |
| stackhawk/agent-skills docs.stackhawk.com Security testing skills for AI coding agents. Find and fix exploitable vulnerabilities wit | 16 | Claude Code | 1 | 1,935 tok |
| ashlrai/phantom-secrets phm.dev Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secret | 16 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 5,964 tok |