2,139 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| fosres/SecEng-Exercises dev.to A repository of Security Engineering exercises: these exercises are designed to prepare yo | 25 | Claude Code | 1 | 1,015 tok |
| backbay-labs/hush hushspec.org Portable security rules for the action boundary of AI agents | 25 | Claude Code | 1 | 1,526 tok |
| gtasb/Burp-AI-Analyzer An AI-assisted penetration testing assistant developed with agentscope | 25 | Codex, OpenCode | 1 | 2,357 tok |
| ModelContextProtocol-Security/mcpserver-audit mcpserver-audit: Helps you check if MCP servers are safe before using them. Examines serve | 25 | Claude Code | 1 | 1,502 tok |
| ty13r/substack-mcp-plus The most advanced Substack MCP server. 12 tools, browser auth, rich text support. Not affi | 25 | Claude Code | 1 | 2,882 tok |
| afiqiqmal/claude-security-audit Claude Code slash command for white-box security auditing with OWASP Top 10:2025 and NIST | 25 | Claude Code | 1 | 828 tok |
| gromhacks/bonsai-ninja 🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compil | 25 | Claude Code, Codex, OpenCode | 2 | 6,225 tok |
| Njones17/AI-agent-master-cyber-skills-list The most comprehensive cybersecurity skill pack for AI coding agents — 741 skills spanning | 25 | Claude Code | 1 | 3,089 tok |
| meesii/codex-mcp Codex-MCP for ChatGPT Web | 25 | Codex, OpenCode | 1 | 2,201 tok |
| badchars/cloud-audit-mcp Cloud security audit tools for AI agents — AWS, Azure, GCP misconfiguration detection via | 25 | Claude Code | 1 | 757 tok |
| byadsco/meta-ads-mcp MCP server for Meta Ads (Facebook/Instagram) - agency multi-account, cloud-ready | 25 | Claude Code, Codex, OpenCode | 3 | 5,912 tok |
| rcb0727/powerplatform-mcp-server Power Platform MCP server with Azure CLI auth: 302 tools, no app registration required. Do | 25 | Claude Code | 1 | 2,241 tok |
| matteocervelli/llms Centralized LLM configuration and documentation management system. Tools for building skil | 25 | Claude Code | 39 | 347 tok |
| geoff-maddock/events-tracker arcane.city CRM and calendar to track events, weekly and monthly series, promoters, artists, producers | 25 | Claude Code | 2 | 1,577 tok |
| tobyilee/toby-plugins Toby's personal Claude Code plugin toolkit: code analysis, TDD, Spring scaffolding, PRD ge | 24 | Claude Code | 2 | 200 tok |
| varrdinc/varrd varrd.com AI-powered trading research platform. Test any idea on stocks, futures, and crypto with ev | 24 | Claude Code | 1 | 243 tok |
| r5rana/agentware Framework that makes your LLM self-aware, loops with self-learning and persistent memory t | 24 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 34 | 4,731 tok |
| wangjianjq/Skill Auto agents | 24 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode | 45 | 8,297 tok |
| RobithYusuf/mcp-stealth-chrome Stealth Chrome MCP server — 100++ tools for AI agents. One-liner Cloudflare Turnstile bypa | 24 | Claude Code, Codex, OpenCode | 2 | 4,147 tok |
| puck-security/puck-scout puck.security Autonomous, read-only endpoint investigation via MCP. Ask a question about your fleet, get | 24 | Claude Code | 1 | 1,649 tok |
| fb0sh/pentester An automated penetration testing framework based on AI agents, strictly following the PTES | 24 | Claude Code, Codex | 58 | — |
| rayline-ai/rayline rayline.ai Open-source local router for coding agents, connecting Claude Code to cloud and local on-d | 24 | Claude Code, Codex, OpenCode | 2 | 961 tok |
| VincentChuWaiChow/vanguard-frontier-agentic Curated marketplace of AI skills, agents, and rules for cloud, zero-trust, and compliance- | 24 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 6,394 tok |
| Mirrowel/Mirrobot-agent mirrowel.github.io Production-ready AI GitHub bot powered by OpenCode Automate issue analysis, PR reviews, an | 24 | GitHub Copilot | 2 | — |
| aldegad/safedeps npmjs.com Dependency safety gate for Claude Code & Codex CLI — OSV pre-approval, npm lockfile-closur | 24 | Claude Code, Codex, OpenCode | 2 | 37,362 tok |
| akanthed/SecureAI-Scan npmjs.com Find AI/LLM security vulnerabilities in your code before attackers do — covers prompt inje | 24 | Claude Code | 1 | 5,083 tok |
| A-G-U-P-T-A/wireshark-mcp a-g-u-p-t-a.github.io TShark/Wireshark MCP server for network packet analysis via Claude | 24 | Cursor | 1 | — |
| aveproject/ave aveproject.org AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for a | 24 | Claude Code | 14 | 1,680 tok |
| 2233admin/reverse-skill-evolver Reverse-engineering skills for AI coding agents, with IDA/MCP integration, APK and JavaScr | 24 | Kiro | 1 | 986 tok |
| capiscio/a2a-demos capisc.io Demo agents showcasing CapiscIO Agent Guard and MCP Guard — trust badges, identity verific | 23 | GitHub Copilot | 1 | 901 tok |
| verygoodsecurity/vgs-collect-ios verygoodsecurity.com VGS Collect iOS SDK | 23 | Codex, OpenCode | 1 | 13 tok |
| sy159/snowgo A lightweight rapid-development Golang API project built with Gin + Gorm, ready to use out | 23 | Codex, OpenCode | 1 | 1,720 tok |
| ShieldNet-360/secure-vibe SecureVibe — prevention-first security for AI-written code. Signed SKILL.md knowledge that | 23 | Codex, OpenCode | 1 | 1,449 tok |
| Correia-jpv/fucking-awesome-web-security 🐶 A curated list of Web Security materials and resources. With repository stars⭐ and fork | 23 | Claude Code | 1 | 3,273 tok |
| zilbonn/OWASP-WSTG-Rag OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code | 23 | Claude Code | 1 | 1,063 tok |
| spaquet/gemtracker gemtracker-website.spaquet74.workers.dev Quickly track and analyze your ruby gem dependencies | 23 | Claude Code | 2 | 2,613 tok |
| kalpmodi/akira Autonomous offensive security agent. Plans engagements, runs recon, chains exploits, and w | 23 | Codex, OpenCode | 1 | 575 tok |
| zhouwei713/WorkBuddy-Dream-Skin Community image-driven skin for Tencent WorkBuddy desktop. External CDP injection, fully r | 23 | Codex, OpenCode | 1 | 826 tok |
| claude-code-expert/example Collection of Claude Code configuration and Markdown examples | 23 | Claude Code | 6 | — |
| fortify/skills opentext.com AI agent skills for OpenText Fortify — SAST/DAST/SCA scanning, vulnerability triage, remed | 23 | GitHub Copilot | 1 | 1,613 tok |
| nexus-substrate/nexus-agents nexus-substrate.github.io Governance substrate for your AI coding agents — adversarial review, drift-detected rules, | 23 | Claude Code, Codex, Gemini CLI, OpenCode | 7 | 32,125 tok |
| SkyShannonProver/shannon-prover skyshannonprover.github.io LLM agents that write machine-checked cryptographic proofs in EasyCrypt (arXiv:2607.02847) | 23 | Claude Code, Codex, OpenCode | 4 | 2,765 tok |
| l-nmch/hailo-10h-llm-compiler Compile your own LLM for the Hailo-10H — an open pipeline from Hugging Face checkpoint to | 23 | Claude Code | 4 | 924 tok |
| narosemena/master-instructional-design A Claude skill embodying a 30-year veteran ID practitioner — 15 engagement modes, 31 refer | 23 | Claude Code, Gemini CLI | 6 | 2,406 tok |
| Elnora-AI/elnora-ai-agent-hackathon-starter-kit Run one command, follow the instructions, and get your first AI agents up and running — Cl | 22 | Claude Code, Codex, OpenCode | 3 | 3,892 tok |
| meltedinhex/analyst-ai-pack meltedinhex.com An open agent-skills library for malware analysis, reverse engineering, and threat hunting | 22 | Codex, GitHub Copilot, OpenCode | 2 | 1,536 tok |
| ducnguyen67201/FeatherlaneAI featherlane.ai Real-time guardrail runtime for AI agents. | 22 | Claude Code, Codex, OpenCode | 2 | 4,375 tok |
| gemvc/gemvc gemvc.de A lightweight, server-agnostic PHP framework (Swoole/Nginx/Apache) designed for building h | 22 | Cursor | 2 | 1,588 tok |
| fdhhhdjd/Class-Production-AI-App 🏗️ Production-ready AI app structure — RAG pipeline, hybrid search, self-correcting agent | 22 | Claude Code, Codex, OpenCode | 2 | 776 tok |
| mrFlick72/vauthenticator VAuthenticator OpenID Connect/OAuth2.1 Auth server | 22 | Claude Code, Codex, OpenCode | 2 | 207 tok |