1,172 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| creatornader/atrib atrib.dev Verifiable agent actions. Every action becomes signed context for the next. Ed25519 signat | 8 | Claude Code, Codex, OpenCode | 4 | 20,384 tok |
| ChangooLee/mcp-kr-legislation A Model Context Protocol (MCP) server integrating the Korean Ministry of Government Legisl | 8 | Codex, Cursor, OpenCode | 2 | 7,528 tok |
| S3DFX-CYBER/Claude-Skills-Security A production-grade security triage skill for AI agents. | 8 | Codex, OpenCode | 1 | 1,494 tok |
| agentverus/agentverus-scanner agentverus.ai Trust, but verify. Security scanner for AI agent skills. Detects prompt injection, data ex | 8 | Codex, OpenCode | 1 | 2,548 tok |
| berkcangumusisik/repo-seatbelt npmjs.com A safety layer for AI coding agents. CLAUDE.md/AGENTS.md generator, MCP runtime guardrail, | 8 | Claude Code, Codex, OpenCode | 2 | 1,503 tok |
| wangdongzuopin/sentinel-skill Sentry, guarding code security. Code auditing, penetration testing, and CTF. | 8 | Codex, OpenCode | 1 | 342 tok |
| vepo/issues Sistema de Gestão de Mudanças | 8 | Claude Code, Codex, Cursor, OpenCode | 25 | 4,153 tok |
| SylphxAI/filesystem-mcp npmjs.com ARCHIVED non-primary. Prefer Citra/Iris/Cue/Prism/Spine/Lookout. | 8 | Codex, OpenCode | 1 | 455 tok |
| nbiish/mcp-calc-tools | 8 | Codex, OpenCode | 1 | 3,864 tok |
| ABMJ/tenable-sc-mcp-server Production-ready MCP server for Tenable Security Center with intelligent caching. 90% toke | 8 | Codex, OpenCode | 1 | 1,269 tok |
| tb0hdan/wass-mcp Web Application Security Scanner MCP Server | 8 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 191 tok |
| snyk/saw-mcp | 8 | Claude Code, Codex, OpenCode | 2 | 1,968 tok |
| actual-software/actual-cli cli.actual.ai Architecture questions, answered from your ADRs. | 8 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,269 tok |
| P4ST4S/mcp-audit A transparent Go proxy that intercepts, signs, and audits all MCP tool calls between any c | 8 | Claude Code, Codex, OpenCode | 5 | 2,890 tok |
| trueoriginlabs/vibatchium pypi.org Stealth browser automation for AI agents — unattended, headless, N parallel persistent log | 8 | Codex, OpenCode | 1 | 15,899 tok |
| BashaarJavaid/MCP-Sentinel bashaarjavaid.github.io PortunusMCP Sentinel: build-time security scanning for MCP servers. | 8 | Codex, OpenCode | 1 | 2,929 tok |
| Quidli/connect-mcp connect.quid.li MCP server for agent identity & reputation: resolve social handles to wallet addresses, sc | 8 | Claude Code, Codex | 1 | — |
| purinzan/gx3-cli-mcp zenn.dev Trace a GX Works3 ladder without opening GX Works3 — read-only CLI + MCP server so anyone | 8 | Codex, OpenCode | 1 | 358 tok |
| 0xHoneyJar/loa-freeside Platform layer of the Loa protocol | 8 | Claude Code, Codex, OpenCode | 11 | 5,343 tok |
| snapsynapse/skill-provenance skillprovenance.dev Version identity and integrity verification for Agent Skills. Tracks versions, detects sta | 7 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 2,382 tok |
| steve-magne/hookstack hookstack.app Claude Code hooks catalogue — production-ready hooks for Claude Code, OpenAI Codex & GitHu | 7 | Claude Code, Codex, OpenCode | 28 | 9,006 tok |
| taniwhaai/arai arai.taniwha.ai Your AI assistant reads CLAUDE.md and ignores it anyway. Ārai makes instruction files enfo | 7 | Claude Code, Codex, OpenCode | 11 | 5,060 tok |
| frootai/frootai frootai.dev From the Roots to the Fruits ! | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 9,604 tok |
| Diplomat-ai/diplomat-agent diplomat.run What can your AI agent do to the real world? Scan your code. See which tool calls have zer | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,004 tok |
| ramboz/jig A Claude Code and Codex plugin that scaffolds AI-native development practices into new pro | 7 | Claude Code, Codex, OpenCode | 8 | 6,940 tok |
| WasmAgent/wasmagent-js wasmagent.github.io Embedded agent runtime compliance layer — WASM sandbox, MCP firewall, capability manifests | 7 | Claude Code, Codex, OpenCode | 2 | 3,963 tok |
| jmagar/swag-mcp SWAG reverse proxy configuration management via MCP. Create, edit, view, and manage nginx | 7 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 2,374 tok |
| TyrusRC/praetor Agentic pentest & red-team harness via Burp Suite MCP toolkit | 7 | Claude Code, Codex, Gemini CLI, OpenCode | 8 | 12,159 tok |
| MadGapun/PBP Local AI job application assistant for the German-speaking job market (DACH) — job search, | 7 | Claude Code, Codex, OpenCode | 5 | 11,634 tok |
| RenatoMignone/From-LLMs-to-Secure-Agents renatomignone.github.io A visual, source-grounded guide from agent architecture to secure agentic AI systems. | 7 | Codex, OpenCode | 1 | 503 tok |
| omkhar/vulnerability-validation-skill | 7 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 5 | 3,231 tok |
| ucalegon206/agency-agents local fork of msitarzewski/agency-agents | 7 | Codex, OpenCode | 1 | 694 tok |
| mozilla/blender mozilla.github.io | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 319 tok |
| jinyimeng01/net-code-audit-skill-master World-class .NET offensive security & code audit skill suite for AI agents | 7 | Codex, OpenCode | 1 | 1,280 tok |
| cdeust/ai-architect-mcp-codebase ai-architect.tools AI Architect Codebase: cross-platform code intelligence MCP for Claude Code, Codex, Gemini | 7 | Claude Code, Codex, OpenCode | 8 | 429 tok |
| Neetx/ai-security-research-radar AI Security Research Radar — AI for security and security for AI | 7 | Claude Code, Codex, OpenCode | 14 | 3,004 tok |
| netresearch/enterprise-readiness-skill Agent Skill for enterprise readiness assessment - security, quality, and automation | Clau | 7 | Codex, OpenCode | 1 | 941 tok |
| lidless-labs/wazuh-mcp lidless.dev Your SIEM answers live behind a console you babysit. wazuh-mcp reads Wazuh alerts, agents, | 7 | Codex, OpenCode | 1 | 1,149 tok |
| s977043/river-review river-review.the3396.com Turn reviews into organizational decision assets. Review Judgment as Code for AI-assisted | 7 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 10 | 7,238 tok |
| compnew2006/browser-controller MCP server + Chrome extension that gives AI agents control of your real browser with exist | 7 | Codex, OpenCode | 1 | 679 tok |
| elfa-ai/mcp Elfa MCP Server | 7 | Claude Code, Codex, OpenCode | 2 | 359 tok |
| ArmisSecurity/armis-appsec-mcp AI-powered security scanning MCP plugin for Claude Code | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 8,554 tok |
| suyogpawar88/Threat-Model suyogpawar88.github.io | 6 | Codex, OpenCode | 1 | 1,275 tok |
| mtnyilmaz/agents | 6 | Claude Code, Codex, OpenCode | 57 | 2,391 tok |
| morooka-akira/aicm | 6 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 10 | 9,770 tok |
| PoulpYBifle/NCF-Coding-Best-Practices | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 7,859 tok |
| Contoso-State/red-team-agent-orchestration | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 49 | 3,541 tok |
| nerviq/nerviq nerviq.net Your agent docs lie. Nerviq finds the lies in 30 seconds — stale references, permission ex | 6 | Claude Code, Codex, OpenCode | 15 | 2,959 tok |
| jlevy/supply-chain-hardening Supply-chain payloads run at install, import, or repo-open time. Copy-pasteable hardening | 6 | Claude Code, Codex, OpenCode | 6 | 1,947 tok |
| Sandeeprdy1729/timps timps-website.vercel.app The AI memory layer with 17 intelligence tools — catches contradictions, predicts burnout, | 6 | Claude Code, Codex, OpenCode | 2 | 24,995 tok |