1,583 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| Caprista/KarvyLoop The agent that learns how you decide - and proves it by never deciding for you. A local-fi | 17 | Claude Code | 1 | — |
| stackhawk/agent-skills docs.stackhawk.com Security testing skills for AI coding agents. Find and fix exploitable vulnerabilities wit | 16 | Claude Code, Codex, OpenCode | 2 | 2,262 tok |
| renatobardi/hapai renatobardi.github.io Deterministic guardrails for AI coding assistants. Enforce rules via Bash hooks before exe | 16 | Claude Code, Codex, OpenCode | 2 | 13,646 tok |
| badchars/github-security-mcp GitHub security posture analysis for AI agents — 39 MCP tools, 45 checks across org, repos | 16 | Claude Code | 1 | 1,080 tok |
| gpt-cmdr/ras-commander-mcp MCP Server to Access HEC-RAS Project Data via Claude Desktop, Claude Code and other LLMs | 16 | Claude Code, Codex, OpenCode | 2 | 373 tok |
| code-yeongyu/codex-rules Codex plugin that injects project rule files into model context through lifecycle hooks. | 16 | Claude Code, Codex, OpenCode | 1 | 377 tok |
| alfredkzr/aws-iam-identity-center-security-governance-dashboard Open-source governance dashboard for AWS IAM Identity Center. Visualize who has access to | 16 | Claude Code | 1 | 1,145 tok |
| jayelbotvibe-web/hermes-pentest-lab jayelbotvibe-web.github.io AI-orchestrated, Kali-native pentesting lab: an MCP tool-server with scope/VPN/rate/audit | 16 | Claude Code | 1 | 1,683 tok |
| VelkyVenik/missingmcp missingmcp.com MissingMCP — your data, in Claude. OAuth 2.1 gateway hosting the MCP servers Claude is mis | 16 | Claude Code | 1 | 5,579 tok |
| chrischall/skylight-mcp Skylight Calendar MCP — read/write family calendar events, chores, rewards, and shared lis | 16 | Claude Code, Codex, OpenCode | 2 | 10,188 tok |
| snowdreamtech/template snowdreamtech.github.io An enterprise-grade, foundational template designed for multi-AI IDE collaboration. This r | 16 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 7 | 2,764 tok |
| daochild/agents-config Agents config for development | 16 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 4,074 tok |
| heikki-laitala/pruner Cut AI coding agent costs 15-62% and time 39-64%. Structural code indexing that gives Clau | 16 | Claude Code | 3 | 608 tok |
| matthiastjong/shellgate-legacy shellgate.ai Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail. | 15 | Claude Code, Codex, OpenCode | 2 | 2,794 tok |
| prodlint/prodlint prodlint.com Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find ou | 15 | Claude Code, Codex, OpenCode | 2 | 5,502 tok |
| CsabaKovacs/rulesmith Local-first CLI + MCP server that maps repositories and generates evidence-backed AI agent | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 4,962 tok |
| sbom-tool/gh-guard sbom.tools CI/CD supply chain hardening plugin for Claude Code, designed for Rust projects | 15 | Claude Code | 1 | 1,432 tok |
| miapre/mimic-ai The design system copilot that builds Figma from HTML using your real components and token | 15 | Claude Code | 4 | 7,131 tok |
| ratel-ai/ratel-local MCP server library + ratel-local CLI: expose a Ratel tool catalog as a Model Context Proto | 15 | Claude Code, Codex, OpenCode | 2 | 479 tok |
| sint-ai/sint-protocol sint.gg Open-source runtime security and governance for AI agents, MCP tools, robotics, industrial | 15 | Claude Code, Codex, OpenCode | 2 | 4,785 tok |
| UserB1ank/code-audit-system A CVE-oriented multi-agent code audit system implemented as a Claude Code skill. It orches | 15 | Claude Code | 1 | 876 tok |
| prompt-armor/prompt-armor pypi.org Open-source prompt injection detector — 5 layers, 91.7% F1, ~27ms, offline, Apache 2.0 | 15 | Claude Code | 1 | 1,684 tok |
| jeonghwanko/onesub npmjs.com Server-side receipt validation for react-native-iap. Apple StoreKit 2 + Google Play Billin | 15 | Claude Code, Codex, OpenCode | 3 | 7,673 tok |
| tarekmo0/HunterStick A persistent context and fieldcraft system for AI-assisted bug bounty hunting. | 15 | Claude Code, Codex, OpenCode | 37 | 7,495 tok |
| Wang-Yanting/PIMiner | 15 | Claude Code | 4 | 3,431 tok |
| zksecurity/zk-skills ZKSecurity's open-source AI-skills for pre-auditing ZK circuits | 15 | Claude Code | 1 | 136 tok |
| tae0y/python-project-template Project template for Claude Python Vibecoding workflow | 15 | Claude Code | 3 | — |
| hoangsonww/DevVerse-SWE-Blog devverse-swe.vercel.app 🪐 DevVerse CS Blog – A modern, high-performance blog app built with Next.js, Vercel, Supa | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 3,839 tok |
| Cynrath/agent-context-kit cynrath.github.io Offline-first toolkit for agent-ready repositories: readiness scoring, instruction graphs, | 14 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 4,051 tok |
| joslat/maf-doctor AI-powered toolkit for Microsoft Agent Framework (MAF) migrations — agents, skills, MCP se | 14 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 7,410 tok |
| voodootikigod/skills-check skillscheck.ai The missing quality toolkit for Agent Skills | 14 | Claude Code, Codex, OpenCode | 2 | 7,374 tok |
| tigrisdata/mcp-oidc-provider tigrisdata.com Open-sourced mcp-oidc-provider: a minimal, vendor-neutral OIDC layer that sits between MCP | 14 | Claude Code, Codex, OpenCode | 2 | 639 tok |
| willwebster5/crowdstrike-mcp | 14 | Claude Code | 1 | — |
| adithyan-ak/agentmask adithyanak.com Mask your secrets from AI coding agents. Full context. Zero exposure. | 14 | Claude Code | 1 | 2,326 tok |
| supermhel/fengarde supermhel.github.io Open-source, self-hosted security pipeline for IT, AI and OT. Logs in. Evidence out.: OCSF | 14 | Claude Code | 1 | 1,211 tok |
| MinistryPlatform-Community/MPNext NextJS Application Integrated with MP Authentication and REST API | 14 | Claude Code | 4 | 6,329 tok |
| MingyiSecLab/Mingyi-Atlas Harness-driven terminal AI agent for authorized security assessment, with TUI, headless | 14 | Claude Code, Codex, OpenCode | 2 | 5,990 tok |
| devfullcycle/claude-subagents | 14 | Claude Code | 2 | — |
| Coveros/StrategiesforTestingAI Repo for Strategies for Testing AI-Based Systems Class | 14 | Claude Code, GitHub Copilot | 8 | 680 tok |
| arcobaleno64/agy-plugin-cc agy-plugin-cc is a Claude Code companion for running Gemini CLI or Antigravity CLI (agy) a | 14 | Claude Code | 1 | — |
| inevolin/agentic-ai-safety-and-security-program ai.nevolin.be Agentic AI Safety & Security Program - Built at Anthropic’s Claude Opus 4.7 Hackathon | 14 | Claude Code | 1 | 5,671 tok |
| shenjingnan/haimen Enter through this door, exit through that door. | 14 | Claude Code, Codex, OpenCode | 7 | 2,038 tok |
| confluentinc/claude-code-confluent-plugin A Claude Code plugin that lets developers build Confluent Cloud infrastructure and data st | 13 | Claude Code | 16 | 1,217 tok |
| Kaademos/secure-sdlc-agents owasp.org A team of Claude Code sub-agents that enforce security across the full SDLC, from ASVS req | 13 | Claude Code | 9 | 2,116 tok |
| djscheuf/agentic-dev-ecosystem-template Template Repo with The Ecosystem of Rules, Skills, and Workflows for development with Devi | 13 | Claude Code, Codex, OpenCode | 4 | 890 tok |
| KalarisLabs/Skill-Doctor Deterministic security analysis for agent skill files. | 13 | Claude Code, Codex, OpenCode | 3 | 1,336 tok |
| NERVsystems/cotlib cotlib is a secure, high-performance Go library for parsing, validating, and generating Cu | 13 | Claude Code, Codex, OpenCode | 2 | 1,170 tok |
| Threat-Vector-Security/guardian-agent Local workstation and network security with ContextCypher diagrams, threat analysis and GR | 13 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,991 tok |
| vietanhdev/bulwark bulwark.nrl.ai A Linux host security scanner with a native CLI and desktop GUI — SSH/kernel/systemd harde | 13 | Claude Code, Codex, OpenCode | 2 | 13,788 tok |
| ArdaTX/Cybersec-Reporting-Engine Enterprise-Grade Cybersecurity Reporting Platform — Automated report generation for pentes | 13 | Claude Code, Codex, OpenCode | 12 | 1,086 tok |