1,583 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| getmunin/munin getmunin.com The customer platform for the agentic era. MCP-first, open source, self-hostable. | 21 | Claude Code, Codex, OpenCode | 4 | 8,213 tok |
| TheLobbi/claude thelobbi.github.io | 21 | Claude Code | 9 | — |
| natea/ExoMind Highly skilled voice-based assistant with intimate knowledge of your preferences, interest | 20 | Claude Code | 6 | 3,282 tok |
| algorismo-au/lanekeep Governance guardrails and insights for AI coding agents | 20 | Claude Code | 1 | 1,255 tok |
| ogrodev/fsociety Multi-plugin marketplace for Claude Code offensive security plugins | 20 | Claude Code | 1 | 2,310 tok |
| mnvsk97/agentbreak infrastructure chaos to test the resilience of ai agents | 20 | Claude Code | 1 | 155 tok |
| simple10/openclaw-stack Deploy a secure OpenClaw to any VPS using Claude Code. | 20 | Claude Code | 4 | 1,740 tok |
| thejefflarson/soundcheck Simple security reviews for AI agents | 20 | Claude Code | 62 | 2,821 tok |
| pierreb-devkit/Node weareopensource.me :computer: Node - Boilerplate Back : Express, Jwt, Mongo, Sequelize | 20 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 2,293 tok |
| yultyyev/better-auth-firebase-auth npmjs.com Use Firebase Authentication (Phone SMS OTP, Google, Email) with Better Auth sessions, orga | 20 | Claude Code, Codex, OpenCode | 2 | 2,443 tok |
| pluginslab/wp-agentic-kit pluginslab.com Starter kit for agentic WordPress development. CLAUDE.md/AGENTS.md templates, the wordpres | 20 | Claude Code, Codex, OpenCode | 8 | 3,997 tok |
| Repliers-io/mcp-server Open-source MCP server for the Repliers API. Lets developers build conversational and agen | 20 | Claude Code | 3 | 3,097 tok |
| AgentSafe-AI/tooltrust-scanner tooltrust.dev Security scanner for AI agent tool definitions | 19 | Claude Code, Codex | 2 | 183 tok |
| Bugb-Technologies/guardlink guardlink.bugb.io AI-maintained security annotations for code. Continuous threat modeling, enforced in CI. | 19 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 3,361 tok |
| sinewaveai/prooflayer-rules proof-layer.com Open-source runtime security rules engine for MCP servers and AI agents. Detects prompt in | 19 | Claude Code | 1 | 1,938 tok |
| gleanwork/mcp-server-tester Playwright-based testing and eval framework for MCP servers with LLM-as-a-judge | 19 | Claude Code, Codex, OpenCode | 3 | 7,253 tok |
| safe-agentic-world/nomos Deny-wins policy hook for Claude Code and Codex. Checks every shell, file, and fetch call | 19 | Claude Code, Codex, OpenCode | 2 | 2,832 tok |
| staticroostermedia-arch/engram glama.ai Geometric agent memory for Agents: 8-tool lean contract, harness injection at wake, sessio | 19 | Claude Code, Codex, OpenCode | 2 | 3,188 tok |
| tahirraufkeeyu/software-development-agent-stack--sdas Turn Claude into your team's teammate — 50 ready-to-install skills for engineering, securi | 19 | Claude Code | 1 | — |
| snyk-labs/toxicskills-goof ToxicSkills - malicious agent skills in openclaw / clawhub / agent supply chain | 19 | Claude Code, Codex, Gemini CLI | 6 | — |
| kingggg5/shipproof shipproof-site.sjet2744.chatgpt.site Evidence-first Codex, Claude plugin for bugs, security, and 10k-to-1M-user scale readiness | 19 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,055 tok |
| clouisle/Clouisle clouisle.asia Next-Generation Multi-Agent Collaboration Platform and Workflow Engine. Build and orchestr | 19 | Claude Code, Codex, OpenCode | 2 | 1,017 tok |
| usk6666/yorishiro-proxy AI-native MITM proxy — MCP server for traffic interception, recording & replay | 19 | Claude Code | 19 | 11,750 tok |
| securityfortech/hacking-skills Claude Code skills for finding bugs and vulnerabilities — bug bounty, pentest, CTF, code r | 19 | Claude Code | 1 | 369 tok |
| SnailSploit/Burp-MCP-Security-Analysis-Toolkit snailsploit.com Burp MCP Security Analysis Toolkit | 19 | Claude Code | 1 | 1,336 tok |
| open-mcp-ai/termcp Not only an MCP that lets AI act like a human at the terminal — also a cross-platform AI-N | 19 | Claude Code, Codex, OpenCode | 2 | 1,100 tok |
| PacktPublishing/The-Claude-Code-Operating-Model The Claude Code Operating Model, published by Packt | 19 | Claude Code | 1 | — |
| spences10/mcp-turso-cloud 🗂️ A Model Context Protocol (MCP) server that provides integration with Turso databases f | 18 | Claude Code, Codex, OpenCode | 2 | 259 tok |
| openfused/openfused openfused.dev OpenFused is a shared memory and messaging layer for AI agents, built on plain files. It | 18 | Claude Code | 1 | 1,533 tok |
| vigil-agency/vigil vigil.agency The Security Agency That Never Sleeps — AI-powered security operations platform | 18 | Claude Code | 1 | 580 tok |
| eddiesanjuan/markupr markupr.com Give your AI coding agent eyes and ears. Screen + voice capture → structured Markdown. MCP | 18 | Claude Code | 10 | 2,979 tok |
| callobuzz/cob-shopify-mcp callobuzz.com Production-grade MCP server and CLI tool for Shopify Admin GraphQL API — 49+ tools, YAML-e | 18 | Claude Code | 1 | 1,927 tok |
| ashlrai/phantom-secrets phm.dev Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secret | 18 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 6,798 tok |
| samaritan0/dfir-agentic-suite An autonomous Digital Forensics & Incident Response toolkit built on Claude's skill and MC | 18 | Claude Code | 1 | 833 tok |
| alifanov/scopegate scopegate.dev AI Access Proxy Layer — granular permission gateway for AI agents. Connect services, defin | 18 | Claude Code, Codex | 4 | 7,613 tok |
| Laotree/verify-networking-plugin Network check before Claude Code starts — DNS, exit IP region, and TCP connectivity with � | 18 | Claude Code | 1 | 1,740 tok |
| jhlee111/ash_grant Permission-based authorization extension and dev tools for Ash Framework | 18 | Claude Code | 4 | 2,970 tok |
| adcontextprotocol/adcp-client adcontextprotocol.github.io A Typescript SDK for the AdCP protocol (client and server) | 18 | Claude Code, Codex, GitHub Copilot, OpenCode | 37 | 12,553 tok |
| eupassarin/simplesign eupassarin.github.io Enterprise digital signatures for .NET — PAdES · CAdES · XAdES. Zero external crypto deps. | 18 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,698 tok |
| Eilodon/CALM npmjs.com A live, graph-verified map of your codebase for AI coding agents — real call graphs, compi | 17 | Claude Code, Codex, OpenCode | 7 | 7,514 tok |
| appsec-foundry/appsec-advisor Claude Code plugin for code-anchored threat modeling and security architecture review. | 17 | Claude Code, Codex, OpenCode | 4 | 3,310 tok |
| flagify-com/soar-mcp SOAR MCP Server is an innovative security orchestration platform integration solution that | 17 | Claude Code | 1 | 1,618 tok |
| tiluckdave/hound-mcp npmjs.com The dependency bloodhound for AI coding agents. Free, no API keys. | 17 | Claude Code | 1 | 1,703 tok |
| Evaluris-Solutions/claude-active-directory evaluris.com AI agent harness for Active Directory offensive security — 8 skill domains, 13 slash comma | 17 | Claude Code | 1 | 1,208 tok |
| infinitepi-io/bookmark-manager-mcp A lightweight Model Context Protocol (MCP) server that provides persistent bookmark manage | 17 | Claude Code | 2 | — |
| aartiq/nowaikit nowaikit.com ServiceNow MCP server: 500+ tools and 26 AI capabilities for any AI (Claude, ChatGPT, Gemi | 17 | Claude Code | 10 | — |
| tene-ai/tene tene.sh AI-safe secret manager CLI for Claude Code, Cursor, and other AI agents. Local-first, encr | 17 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,109 tok |
| TsuyoshiUshio/buka-samples Sample Project for the buka project | 17 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 2,584 tok |
| denn-gubsky/loomcycle loomcycle.dev The runtime substrate for agentic systems — one Go binary, six LLM providers, MCP-native, | 17 | Claude Code | 1 | 13,241 tok |
| klodr/gmail-mcp Gmail MCP server — scope-gated tools (readonly / send / modify), path jails for attachment | 17 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,076 tok |