1,117 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| n-shadloo/secure-code-auditor Backend security Agent Skill that helps AI audit code, detect vulnerabilities, and generat | 4 | Codex, Gemini CLI, OpenCode | 2 | 1,598 tok |
| subodhkc/ai-appsec Evidence-backed AppSec for AI applications and agents. Powered by HAIEC. | 4 | Codex, OpenCode | 1 | 2,730 tok |
| bx33661/oh-my-vul npmjs.com Evidence-first vulnerability research workspace and Skills for Claude Code and Codex. | 4 | Codex, OpenCode | 1 | 449 tok |
| VersoXBT/claude-initial-setup 75 skills, 14 agents, 15 commands for Claude Code. Plug-and-play starter kit covering Type | 4 | Codex, GitHub Copilot, Cursor, OpenCode | 3 | 4,908 tok |
| asterixix/polish-academic-mcp Polskie bazy wiedzy (od naukowych po dane statystyczne, prawne, meteorologiczne, normy ora | 4 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 18,482 tok |
| KyaniteLabs/DialectOS kyanitelabs.github.io Spanish dialect localization MCP server and CLI. Translate across 25 regional variants wit | 4 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 5 | 4,542 tok |
| davidnichols-ops/trustcard Cryptographic trust infrastructure for MCP servers — signed manifests, TOFU pinning, two-g | 4 | Claude Code, Codex, OpenCode | 3 | 2,467 tok |
| camjac251/tool-gates camjac251.github.io Intelligent tool permission gate & security hooks for AI assistants (Claude Code, Codex, A | 4 | Claude Code, Codex, OpenCode | 3 | 2,051 tok |
| lidless-labs/mitre-mcp lidless.dev MCP server for the MITRE ATT&CK knowledge base: map alerts to techniques, profile threat g | 4 | Codex, OpenCode | 1 | 1,139 tok |
| jyunming/Axon jyunming.github.io Local-first RAG engine with cited answers from your own docs. GraphRAG, sealed sharing, MC | 4 | Codex, GitHub Copilot, OpenCode | 10 | 9,191 tok |
| patrick-oculussec/fedramp-ksi-agent-skills AI Agent Skills based on FedRAMP 20X KSIs. | 4 | Codex, OpenCode | 1 | 877 tok |
| AliYmn/claude-structured An opinionated project template for Claude Code — persistent context, autonomous workflows | 4 | Claude Code, Codex, OpenCode | 6 | 534 tok |
| ralfyishere/agent-zero-trust Offline repo inspection and change review for AI coding agents. Scan instructions, compare | 4 | Claude Code, Codex, OpenCode | 2 | 718 tok |
| asaphe/promptcraft various rules, prompts and other settings used with various AI tools | 4 | Claude Code, Codex, OpenCode | 5 | 1,084 tok |
| florian101010/awesome-agentic-AI-coding-template Stop re-explaining your project to every AI agent. Pre-wired for Claude Code, Copilot, Cur | 4 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode | 26 | 3,985 tok |
| Mazalucas/El-DT-Lightweight-Army El DT is the framework that turns your AI into a Technical Director: it structures the con | 4 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 5 | 1,357 tok |
| sublimotion/agent-aiops-on-aws Claude Code plugin for AWS infrastructure automation using Terraform with security scannin | 4 | Claude Code, Codex, OpenCode | 5 | 6,911 tok |
| nbiish/gikendaasowin-aabajichiganan-mcp ᑭᑫᓐᑖᓱᐎᓐ ᐋᐸᒋᒋᑲᓇᓐ - Gikendaasowin Aabajichiganan - Cognitive Tools MCP server implemented fr | 4 | Codex, OpenCode | 1 | 801 tok |
| windoze95/servicewow-mcp ServiceNow MCP Server — per-user delegated access via OAuth 2.0 | 4 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,233 tok |
| agenthill/vaultpilot-mcp vaultpilot-mcp.ai Safety first. Hardware-verified DeFi for AI agents — designed for when the AI can be compr | 4 | Claude Code, Codex, OpenCode | 2 | 7,509 tok |
| beriktassuly/solana-audit-skill Evidence-backed Solana audit skill for Claude Code and Agent Skills: report-backed taxonom | 4 | Codex, OpenCode | 1 | 279 tok |
| thekie/read-no-evil-mcp A secure email gateway MCP server that protects AI agents from prompt injection attacks hi | 4 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,233 tok |
| Nosmoht/talos-mcp-server MCP server for Talos Linux cluster management via the native gRPC API | 4 | Claude Code, Codex, OpenCode | 18 | 9,678 tok |
| Montimage/sec-mcp montimage.github.io A Python toolkit providing security checks for domains, URLs, IPs, and more. Integrate eas | 4 | Claude Code, Codex, OpenCode | 2 | 832 tok |
| sukoji/loadout npmjs.com 🎯 Loadout — profile your project and gear up Claude Code with the right skills, MCP serve | 4 | Claude Code, Codex, OpenCode | 6 | 791 tok |
| arcjet/skills Skills to make your AI coding agent an Arcjet security expert. | 4 | Codex, OpenCode | 1 | 688 tok |
| rodrigopg/whatsapp-mcp WhatsApp MCP Server — community fork with LID contact fixes, group management, security ha | 4 | Claude Code, Codex, OpenCode | 2 | 1,067 tok |
| salingnh/android-reverse-engineering-mcp Claude Code skill to support Android app's reverse engineering. (Safe) | 4 | Codex, OpenCode | 1 | 1,089 tok |
| sandraschi/devices-mcp MCP server + web dashboard + Windows Tauri app for home LAN devices (Tapo, Hue, Ring, Nest | 4 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 7 | 3,339 tok |
| xsourabhsharma/ai-security-audit-pro Universal security-audit plugin and CLI engine for AI agents with OWASP-mapped reports for | 4 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 753 tok |
| MilindGaharwar/fettle pypi.org Open-source trust layer for AI coding agents: in-session quality, delegation-safe policy, | 4 | Claude Code, Codex, GitHub Copilot, OpenCode | 18 | 250 tok |
| snyk-labs/snyk-vulnbench vulnbench.com A benchmark harness for measuring how AI coding agents find and fix security vulnerabiliti | 4 | Claude Code, Codex, OpenCode | 12 | 3,693 tok |
| RedHatResearch/aibom-security AI BOM Security | 4 | Claude Code, Codex, OpenCode | 2 | 2,883 tok |
| vaquarkhan/compliance-agent-skills 30 Agent Skills for deterministic USA compliance auditing of AI agents — HIPAA, NIST AI RM | 4 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 2,822 tok |
| zai-one/telegram-ads-mcp zai.one MCP server for Telegram Ads (ads.telegram.org, TON): create, target, pause ads and read st | 4 | Claude Code, Codex, OpenCode | 2 | 413 tok |
| Muqaram0/oscp-companion oscp-companion.vercel.app OSCP methodology knowledge base with web UI and MCP server | 4 | Claude Code, Codex, OpenCode | 2 | 79 tok |
| arsenyspb/comet-boundary hashicorp.com React Single Page Application (SPA) web client for Hashicorp Boundary | 3 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,170 tok |
| renanflustosa/octo-cluster Lean Claude Code plugin: ship logical commits safely (direct or PR, never force-push), tur | 3 | Claude Code, Codex, OpenCode | 9 | 903 tok |
| JinNing6/CyberHuaTuo-Plugin AI Agent Error Doctor: paste MCP / LangChain / CrewAI tracebacks, get root cause, exact fi | 3 | Claude Code, Codex, OpenCode | 4 | 156 tok |
| soden46/engineer-flow Framework-agnostic AI engineering control plane with project-aware routing, 0–2 specialist | 3 | Codex, OpenCode | 1 | 587 tok |
| densmirnov/hidden-achievements-skill Sealed hidden daily achievements for team agents: anti-spam, prompt-injection safe, no ret | 3 | Codex, OpenCode | 1 | 2,394 tok |
| chtnnh/know-code kc.chtnnhfoundation.org k(no)w-code - your agents dont push until you know exactly whats changed | 3 | Claude Code, Codex, OpenCode | 3 | 362 tok |
| Calvin-LLC/agentic-hardening-skill Evidence-driven codebase hardening skill. Audits OWASP Top 10:2025, supply chain (SBOM vs | 3 | Codex, OpenCode | 1 | 91 tok |
| MuhammedZohaib/patchman Defensive AI security audit skill for Claude and Codex. Reviews codebases and web apps for | 3 | Claude Code, Codex, OpenCode | 2 | 250 tok |
| chris-peterson/ClaudeWatch chris-peterson.github.io ClaudeWatch: agents move fast; watch them closely. | 3 | Claude Code, Codex, OpenCode | 4 | 3,482 tok |
| punt-labs/beadle Claude Code via e-mail based on an addressbook with UNIX style rwx permissions per interac | 3 | Claude Code, Codex, OpenCode | 4 | 2,736 tok |
| ashlrai/ashlr-plugin plugin.ashlr.ai Token-efficiency plugin for Claude Code and Codex: MCP tools and hooks that replace high-v | 3 | Codex, OpenCode | 1 | 274 tok |
| HendrikReh/llm-guard AI Coding Hackathon Project - Experimenting with AI-assisted development workflows | 3 | Codex, OpenCode | 1 | 3,941 tok |
| juwonllee2024-dotcom/rulesync The ESLint & Babel for AI Agent Rules — Compile, lint, optimize, and sync instructions acr | 3 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 882 tok |
| kent-tokyo/shohei Rust MCP server with 168 security tools for Claude — DNS/DNSSEC, TLS, email security, OSIN | 3 | Codex, OpenCode | 1 | 2,537 tok |