1,026 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,374Claude Code6,573Data and AI3,706Backend and APIs3,486Languages3,398Planning3,181Git and workflow3,100Code review2,701Memory and context2,354Testing2,311Research2,292DevOps and cloud2,282
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| PoulpYBifle/NCF-Coding-Best-Practices | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 7,859 tok |
| Contoso-State/red-team-agent-orchestration | 6 | Claude Code, Codex, OpenCode | 47 | 2,697 tok |
| nerviq/nerviq nerviq.net Your agent docs lie. Nerviq finds the lies in 30 seconds — stale references, permission ex | 6 | Claude Code, Codex, OpenCode | 15 | 2,959 tok |
| egarcia74/warp-sql-server-mcp egarcia74.github.io 🗄️ Model Context Protocol (MCP) server for SQL Server integration with Warp terminal. Exe | 6 | Codex, GitHub Copilot, OpenCode | 3 | 1,575 tok |
| RenatoMignone/From-LLMs-to-Secure-Agents renatomignone.github.io A visual, source-grounded guide from agent architecture to secure agentic AI systems. | 6 | Codex, OpenCode | 1 | 503 tok |
| omkhar/vulnerability-validation-skill | 6 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 5 | 3,231 tok |
| shenjingnan/haimen Enter through this door, exit through that door. | 6 | Claude Code, Codex, OpenCode | 7 | 2,038 tok |
| fonsecafns/sentinela Um auditor de segurança que vive dentro do seu agente de IA. Varre o projeto inteiro, usa | 6 | Codex, Gemini CLI, OpenCode | 2 | 17,496 tok |
| lucaspressi/claudekit-engineer | 6 | Claude Code, Codex, Gemini CLI, OpenCode | 10 | 2,006 tok |
| mrgnhnt96/sip A command-line tool to manage Dart mono-repos. | 5 | Claude Code, Codex, OpenCode | 7 | 2,533 tok |
| pleasedodisturb/llm-safe-haven One-liner for AI solo developers to fasten the security bolts on their systems | 5 | Claude Code, Codex, OpenCode | 2 | 2,287 tok |
| jlevy/supply-chain-hardening Supply-chain payloads run at install, import, or repo-open time. Copy-pasteable hardening | 5 | Claude Code, Codex, OpenCode | 6 | 1,947 tok |
| jmagar/swag-mcp SWAG reverse proxy configuration management via MCP. Create, edit, view, and manage nginx | 5 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 2,374 tok |
| olanokhin/agent-security-skill Native Claude Code + Codex skills for AI security review. Also ships instruction files for | 5 | Codex, OpenCode | 1 | 140 tok |
| yunsii/wezdeck A flight deck for your AI agents — multi-agent terminal platform built on WezTerm + tmux + | 5 | Claude Code, Codex, OpenCode | 4 | 4,379 tok |
| Sandeeprdy1729/timps timps-website.vercel.app The AI memory layer with 17 intelligence tools — catches contradictions, predicts burnout, | 5 | Claude Code, Codex, OpenCode | 2 | 24,407 tok |
| xChechi/xche-ai-app-security-pack stefannasev.dev Free security guardrails for apps built with AI coding tools (Claude Code, Cursor, Lovable | 5 | Claude Code, Codex, OpenCode | 2 | 1,527 tok |
| TyrusRC/praetor Agentic pentest & red-team harness via Burp Suite MCP toolkit | 5 | Claude Code, Codex, OpenCode | 2 | 8,151 tok |
| danygiguere/audit-skills Language- and framework-agnostic audit checklists for AI coding agents — security, correct | 5 | Claude Code, Codex, OpenCode | 2 | 2,553 tok |
| TheSethRose/Vulnerability-Scanning sethrose.dev Local-first vulnerability and supply-chain scanning for agent runtimes. | 5 | Codex, OpenCode | 1 | 978 tok |
| zebbern/pocmap zebbern.github.io MCP-native CVE, PoC & exploit discovery toolkit (Metasploit, Nuclei, GitHub & more) | 5 | Claude Code, Codex, OpenCode | 2 | 4,679 tok |
| jiezeng2004-design/PatchWarden patchwarden-showcase-redesign.yistart.chatgpt.site Turn your ChatGPT conversations into safe, auditable local execution. PatchWarden lets you | 5 | Codex, OpenCode | 1 | 539 tok |
| HanZephyr/AI-Data-Access-Gateway An open-source secure data access gateway for AI agents. It provides database safety acces | 5 | Codex, OpenCode | 1 | 372 tok |
| zessu/samson-ai Your personal fitness trainer. Get fitness recommendations daily through email/SMS | 5 | Codex, OpenCode | 1 | 1,449 tok |
| Nikita3005/taintgate Provenance-aware runtime security for AI agents with deterministic ALLOW / REVIEW / BLOCK | 5 | Codex, OpenCode | 1 | 259 tok |
| comisai/comis comis.ai Open-source security-first runtime for AI agents that learn and act across sessions. | 5 | Claude Code, Codex, OpenCode | 2 | 20,957 tok |
| velias/mcp-auth-adapter An authentication adapter for Model Context Protocol (MCP) world. It sits in front of any | 5 | Codex, OpenCode | 1 | 5,980 tok |
| agent-receipts/openclaw obsigna.dev Agent Receipts / Obsigna plugin for OpenClaw — cryptographically signed audit trail for ag | 5 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 1,940 tok |
| nette/mcp-inspector ai.nette.org Nette application inspector via MCP protocol | 5 | Codex, OpenCode | 1 | 1,474 tok |
| avvocati-e-mac/AnonyMCP Server MCP locale che pseudonimizza documenti legali italiani prima di esporli a un LLM (p | 5 | Claude Code, Codex, OpenCode | 4 | 6,194 tok |
| selfradiance/agentgate Collateralized execution engine for AI agents: bond-and-slash accountability with Ed25519 | 5 | Codex, OpenCode | 1 | 1,113 tok |
| shuaiqideyu/SecAtlas Structured Chinese web penetration knowledge base: technical cards, topics, case studies, | 5 | Codex, OpenCode | 1 | 1,604 tok |
| j-i-l/contAIn Container based opencode setup for strict agent isolation | 5 | Codex, OpenCode | 1 | 1,612 tok |
| enuno/tailscale-acl Tailscale ACL managed by AI coding agents and automated GitOps workflows. | 5 | Claude Code, Codex, Cursor, OpenCode | 3 | 2,948 tok |
| GoogleChromeLabs/passkey-skills-demo | 5 | Claude Code, Codex | 1 | — |
| XuebinMa/agent-guard AI Agent permission enforcement and sandbox security SDK, extracted from claw-code | 5 | Claude Code, Codex, OpenCode | 5 | 3,521 tok |
| wyattowalsh/agents agents.w4w.dev AI agent artifacts, configs, skills, tools, and more | 5 | Claude Code, Codex, OpenCode | 33 | 10,786 tok |
| liyq0307/anti-distill-skills Anti-distillation skill package. | 5 | Claude Code, Codex | 6 | — |
| ucalegon206/agency-agents local fork of msitarzewski/agency-agents | 5 | Codex, OpenCode | 1 | 694 tok |
| karanb192/bouncer A one-file door-guard for coding agents — first-class on Claude Code (permissionDecision d | 5 | Codex, GitHub Copilot, OpenCode | 2 | 936 tok |
| mozilla/blender mozilla.github.io | 5 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 319 tok |
| harshith-vaddiparthy/skills-marketplace-outskill skill-marketplace-beta.vercel.app Enterprise-grade, security-first marketplace for AI agent skills — every skill is vetted b | 5 | Claude Code, Codex, OpenCode | 2 | 79 tok |
| semiotic-ai/agentsec agentsec.sh Agent Audit scans AI agent skills for security vulnerabilities, scores them against the OW | 5 | Claude Code, Codex, OpenCode | 3 | 2,614 tok |
| puppi3s/mythos-anti-sabotage-guardrails Vendor-neutral integrity guardrails for autonomous agents and IDE harnesses. | 5 | Claude Code, Codex | 1 | — |
| Spritualkb/CTFskill | 5 | Claude Code, Codex | 2 | — |
| bombe-match/bombe-poc | 5 | Claude Code, Codex, OpenCode | 3 | 457 tok |
| Jordan231111/MalwareMinimizer Cross-platform Rust malware scanning CLI with quarantine, update workflows, tests, and CI | 5 | Codex, GitHub Copilot, OpenCode | 2 | 3,093 tok |
| opnsrcntrbtr/TrustVault-PWA trust-vault-pwa.vercel.app TrustVault is a privacy-first zero-knowledge Progressive Web App (PWA) credential manager | 5 | Claude Code, Codex, GitHub Copilot, OpenCode | 5 | 4,178 tok |
| loglayer/loglayer-go go.loglayer.dev A modern logging library for Go that routes logs to various logging libraries, cloud provi | 5 | Claude Code, Codex, OpenCode | 4 | 5,730 tok |
| yanis7774/mac-security-audit-skill Read-only macOS security audit (27 checks) for humans and AI agents — Claude Code, Codex, | 5 | Codex, OpenCode | 1 | 618 tok |