1,990 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,450Claude Code6,586Data and AI3,698Backend and APIs3,488Languages3,402Planning3,191Git and workflow3,129Code review2,728Memory and context2,353Testing2,330DevOps and cloud2,293Research2,288
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| callobuzz/cob-shopify-mcp callobuzz.com Production-grade MCP server and CLI tool for Shopify Admin GraphQL API — 49+ tools, YAML-e | 18 | Claude Code | 1 | 1,927 tok |
| narosemena/master-instructional-design A Claude skill embodying a 30-year veteran ID practitioner — 15 engagement modes, 31 refer | 18 | Claude Code, Gemini CLI | 6 | 2,406 tok |
| Liberty91LTD/cti-skills liberty91.com Cyber Threat Intelligence Skills for each stage of the CTI Lifecycle. | 17 | Claude Code, Codex, OpenCode | 4 | 2,048 tok |
| clouisle/Clouisle clouisle.asia Next-Generation Multi-Agent Collaboration Platform and Workflow Engine. Build and orchestr | 17 | Claude Code, Codex, OpenCode | 2 | 529 tok |
| WYRE-AI/itglue-mcp conduit.wyre.ai MCP server for IT Glue — documentation, passwords, configurations, and flexible asset tool | 17 | GitHub Copilot | 1 | 858 tok |
| aveproject/ave aveproject.org AVE - Agentic Vulnerability Enumeration. The behavioral classification standard for agenti | 17 | Claude Code | 14 | 1,671 tok |
| icefrag/nbl-superpowers The agent harness performance optimization system. Skills, instincts, memory, security, an | 17 | Codex, OpenCode | 1 | 57 tok |
| flagify-com/soar-mcp SOAR MCP Server is an innovative security orchestration platform integration solution that | 17 | Claude Code | 1 | 1,618 tok |
| R-s0n/rs0n-bug-bounty-mcp-server An MCP (Model Context Protocol) server that gives Claude Code access to a comprehensive bu | 17 | Claude Code | 1 | 430 tok |
| tiluckdave/hound-mcp npmjs.com The dependency bloodhound for AI coding agents. Free, no API keys. | 17 | Claude Code | 1 | 1,703 tok |
| infinitepi-io/bookmark-manager-mcp A lightweight Model Context Protocol (MCP) server that provides persistent bookmark manage | 17 | Claude Code | 2 | — |
| AppliedIR/sift-mcp appliedir.github.io Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal | 17 | Codex, OpenCode | 1 | 2,318 tok |
| XZXZZX-Ai/bilibili-mcp Bilibili MCP tool A Bilibili MCP server | 17 | Claude Code, Codex, OpenCode | 14 | 1,197 tok |
| jhlee111/ash_grant Permission-based authorization extension and dev tools for Ash Framework | 17 | Claude Code | 4 | 2,346 tok |
| Eilodon/CALM npmjs.com A live, graph-verified map of your codebase for AI coding agents — real call graphs, compi | 16 | Claude Code, Codex, OpenCode | 7 | 7,514 tok |
| appsec-foundry/appsec-advisor Claude Code plugin for code-anchored threat modeling and security architecture review. | 16 | Claude Code, Codex, OpenCode | 4 | 1,845 tok |
| stackhawk/agent-skills docs.stackhawk.com Security testing skills for AI coding agents. Find and fix exploitable vulnerabilities wit | 16 | Claude Code | 1 | 1,935 tok |
| ashlrai/phantom-secrets phm.dev Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secret | 16 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 5,984 tok |
| usk6666/yorishiro-proxy AI-native MITM proxy — MCP server for traffic interception, recording & replay | 16 | Claude Code | 18 | 6,996 tok |
| authprobe/authprobe authprobe.com authprobe pinpoints MCP OAuth failures | 16 | Codex, OpenCode | 1 | 1,121 tok |
| samaritan0/dfir-agentic-suite An autonomous Digital Forensics & Incident Response toolkit built on Claude's skill and MC | 16 | Claude Code | 1 | 833 tok |
| Evaluris-Solutions/claude-active-directory evaluris.com AI agent harness for Active Directory offensive security — 8 skill domains, 13 slash comma | 16 | Claude Code | 1 | 1,208 tok |
| renatobardi/hapai renatobardi.github.io Deterministic guardrails for AI coding assistants. Enforce rules via Bash hooks before exe | 16 | Claude Code, Codex, OpenCode | 2 | 13,646 tok |
| dcollaoa/bloodyad_mcp MCP Server for use bloodyAD with Claude or Gemini-CLI | 16 | Gemini CLI | 1 | 1,798 tok |
| oscal-compass-lab/compliance-trestle-skills Agent-portable Compliance Trestle and OSCAL engineering toolkit: convert legacy SSPs to OS | 16 | Claude Code, Codex, Gemini CLI, OpenCode | 2 | 1,658 tok |
| whitequeen306/code-cortex-loop One-command AI code quality pipeline: review, security, tests, performance, simplify & cle | 16 | Codex, OpenCode | 1 | 1,601 tok |
| databricks-solutions/ai-platform-kit AI-powered Databricks platform engineering — provision workspaces, configure Unity Catalog | 16 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 1,603 tok |
| alifanov/scopegate scopegate.dev AI Access Proxy Layer — granular permission gateway for AI agents. Connect services, defin | 16 | Claude Code, Codex | 4 | 7,477 tok |
| aartiq/nowaikit nowaikit.com ServiceNow MCP server: 450+ tools and 26 AI capabilities for any AI (Claude, ChatGPT, Gemi | 16 | Claude Code | 10 | — |
| Caprista/KarvyLoop The agent that learns how you decide - and proves it by never deciding for you. A local-fi | 16 | Claude Code | 1 | — |
| iOSDevSK/mcp-for-woocommerce mcpforwoocommerce.com WooCommerce MCP Server — WordPress community plugin implementing the Model Context Protoco | 15 | Codex, OpenCode | 1 | 1,039 tok |
| matthiastjong/shellgate-legacy shellgate.ai Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail. | 15 | Claude Code, Codex, OpenCode | 2 | 2,794 tok |
| prodlint/prodlint prodlint.com Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find ou | 15 | Claude Code, Codex, OpenCode | 2 | 4,355 tok |
| icoretech/warden-mcp npmjs.com 🔐 Vaultwarden / Bitwarden MCP server for credential-aware AI agents | 15 | Claude Code, Codex, OpenCode | 2 | 226 tok |
| apache/axis-axis2-c-core axis.apache.org Apache Axis2/C - JSON/REST and SOAP web services framework in C. Runs as an Apache httpd m | 15 | Codex, OpenCode | 1 | 1,947 tok |
| CsabaKovacs/rulesmith Local-first CLI + MCP server that maps repositories and generates evidence-backed AI agent | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 4,962 tok |
| sbom-tool/gh-guard sbom.tools CI/CD supply chain hardening plugin for Claude Code, designed for Rust projects | 15 | Claude Code | 1 | 1,432 tok |
| tene-ai/tene tene.sh AI-safe secret manager CLI for Claude Code, Cursor, and other AI agents. Local-first, encr | 15 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,109 tok |
| Tommertom/sonos-ts-mcp Sonos MCP server for Sonos using Typescript | 15 | GitHub Copilot | 3 | 5,893 tok |
| hyqhyq3/dsh-mcp-manager MCP server manager plugin for DeepSeek Harness: Settings → MCP page, OAuth (PKCE + dynamic | 15 | Codex, OpenCode | 1 | 1,189 tok |
| totalhack/zillion-web Zillion Web: A Demo UI and Web API for Zillion | 15 | GitHub Copilot | 1 | 103 tok |
| snowdreamtech/template snowdreamtech.github.io An enterprise-grade, foundational template designed for multi-AI IDE collaboration. This r | 15 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 7 | 2,764 tok |
| hoangsonww/DevVerse-SWE-Blog devverse-swe.vercel.app 🪐 DevVerse CS Blog – A modern, high-performance blog app built with Next.js, Vercel, Supa | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 3,839 tok |
| CrowdStrike/fusion-skills crowdstrike.com AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discov | 14 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,083 tok |
| grcorsair/corsair grcorsair.com Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Cor | 14 | Codex, OpenCode | 1 | 1,401 tok |
| ZarK/ai-supply-chain-guard Tool-agnostic Agent Skill for dependency supply-chain defense | 14 | Codex, OpenCode | 1 | 298 tok |
| peacprotocol/peac peacprotocol.org Portable signed records for automated interactions. | 14 | Codex, OpenCode | 1 | 1,155 tok |
| joslat/maf-doctor AI-powered toolkit for Microsoft Agent Framework (MAF) migrations — agents, skills, MCP se | 14 | Codex, GitHub Copilot, OpenCode | 5 | 7,516 tok |
| TsuyoshiUshio/buka-samples Sample Project for the buka project | 14 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 2,584 tok |
| Laotree/verify-networking-plugin Network check before Claude Code starts — DNS, exit IP region, and TCP connectivity with � | 14 | Claude Code | 1 | 1,659 tok |