2,139 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| kingggg5/shipproof shipproof-site.sjet2744.chatgpt.site Evidence-first Codex, Claude plugin for bugs, security, and 10k-to-1M-user scale readiness | 19 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,055 tok |
| clouisle/Clouisle clouisle.asia Next-Generation Multi-Agent Collaboration Platform and Workflow Engine. Build and orchestr | 19 | Claude Code, Codex, OpenCode | 2 | 1,017 tok |
| usk6666/yorishiro-proxy AI-native MITM proxy — MCP server for traffic interception, recording & replay | 19 | Claude Code | 19 | 11,750 tok |
| AppliedIR/sift-mcp appliedir.github.io Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal | 19 | Codex, OpenCode | 1 | 2,528 tok |
| securityfortech/hacking-skills Claude Code skills for finding bugs and vulnerabilities — bug bounty, pentest, CTF, code r | 19 | Claude Code | 1 | 369 tok |
| SnailSploit/Burp-MCP-Security-Analysis-Toolkit snailsploit.com Burp MCP Security Analysis Toolkit | 19 | Claude Code | 1 | 1,336 tok |
| open-mcp-ai/termcp Not only an MCP that lets AI act like a human at the terminal — also a cross-platform AI-N | 19 | Claude Code, Codex, OpenCode | 2 | 1,100 tok |
| PacktPublishing/The-Claude-Code-Operating-Model The Claude Code Operating Model, published by Packt | 19 | Claude Code | 1 | — |
| spences10/mcp-turso-cloud 🗂️ A Model Context Protocol (MCP) server that provides integration with Turso databases f | 18 | Claude Code, Codex, OpenCode | 2 | 259 tok |
| openfused/openfused openfused.dev OpenFused is a shared memory and messaging layer for AI agents, built on plain files. It | 18 | Claude Code | 1 | 1,533 tok |
| vigil-agency/vigil vigil.agency The Security Agency That Never Sleeps — AI-powered security operations platform | 18 | Claude Code | 1 | 580 tok |
| eddiesanjuan/markupr markupr.com Give your AI coding agent eyes and ears. Screen + voice capture → structured Markdown. MCP | 18 | Claude Code | 10 | 2,979 tok |
| ajipurn/fida fida.my.id a local-first secret leak prevention layer for AI coding agents | 18 | Codex, OpenCode | 1 | 129 tok |
| callobuzz/cob-shopify-mcp callobuzz.com Production-grade MCP server and CLI tool for Shopify Admin GraphQL API — 49+ tools, YAML-e | 18 | Claude Code | 1 | 1,927 tok |
| ashlrai/phantom-secrets phm.dev Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secret | 18 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 6,798 tok |
| samaritan0/dfir-agentic-suite An autonomous Digital Forensics & Incident Response toolkit built on Claude's skill and MC | 18 | Claude Code | 1 | 833 tok |
| alifanov/scopegate scopegate.dev AI Access Proxy Layer — granular permission gateway for AI agents. Connect services, defin | 18 | Claude Code, Codex | 4 | 7,613 tok |
| ZarK/ai-supply-chain-guard Tool-agnostic Agent Skill for dependency supply-chain defense | 18 | Codex, OpenCode | 1 | 298 tok |
| Laotree/verify-networking-plugin Network check before Claude Code starts — DNS, exit IP region, and TCP connectivity with � | 18 | Claude Code | 1 | 1,740 tok |
| mondoohq/skillcheck skillcheck.run Scan your machine for malicious AI agent skills — supports Claude Code, OpenAI Codex, and | 18 | Codex, OpenCode | 1 | 528 tok |
| jhlee111/ash_grant Permission-based authorization extension and dev tools for Ash Framework | 18 | Claude Code | 4 | 2,970 tok |
| adcontextprotocol/adcp-client adcontextprotocol.github.io A Typescript SDK for the AdCP protocol (client and server) | 18 | Claude Code, Codex, GitHub Copilot, OpenCode | 37 | 12,553 tok |
| seekskyworld/cloud-agent | 18 | Codex, OpenCode | 1 | 938 tok |
| eupassarin/simplesign eupassarin.github.io Enterprise digital signatures for .NET — PAdES · CAdES · XAdES. Zero external crypto deps. | 18 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,698 tok |
| Eilodon/CALM npmjs.com A live, graph-verified map of your codebase for AI coding agents — real call graphs, compi | 17 | Claude Code, Codex, OpenCode | 7 | 7,514 tok |
| appsec-foundry/appsec-advisor Claude Code plugin for code-anchored threat modeling and security architecture review. | 17 | Claude Code, Codex, OpenCode | 4 | 3,310 tok |
| WYRE-AI/itglue-mcp conduit.wyre.ai MCP server for IT Glue — documentation, passwords, configurations, and flexible asset tool | 17 | GitHub Copilot | 1 | 858 tok |
| icefrag/nbl-superpowers The agent harness performance optimization system. Skills, instincts, memory, security, an | 17 | Codex, OpenCode | 1 | 57 tok |
| flagify-com/soar-mcp SOAR MCP Server is an innovative security orchestration platform integration solution that | 17 | Claude Code | 1 | 1,618 tok |
| tiluckdave/hound-mcp npmjs.com The dependency bloodhound for AI coding agents. Free, no API keys. | 17 | Claude Code | 1 | 1,703 tok |
| Evaluris-Solutions/claude-active-directory evaluris.com AI agent harness for Active Directory offensive security — 8 skill domains, 13 slash comma | 17 | Claude Code | 1 | 1,208 tok |
| CoinStatsHQ/coinstats-mcp | 17 | Codex, OpenCode | 1 | 314 tok |
| oscal-compass-lab/compliance-trestle-skills Agent-portable Compliance Trestle and OSCAL engineering toolkit: convert legacy SSPs to OS | 17 | Codex, Gemini CLI, OpenCode | 2 | 1,658 tok |
| infinitepi-io/bookmark-manager-mcp A lightweight Model Context Protocol (MCP) server that provides persistent bookmark manage | 17 | Claude Code | 2 | — |
| aartiq/nowaikit nowaikit.com ServiceNow MCP server: 500+ tools and 26 AI capabilities for any AI (Claude, ChatGPT, Gemi | 17 | Claude Code | 10 | — |
| tene-ai/tene tene.sh AI-safe secret manager CLI for Claude Code, Cursor, and other AI agents. Local-first, encr | 17 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,109 tok |
| TsuyoshiUshio/buka-samples Sample Project for the buka project | 17 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 2,584 tok |
| denn-gubsky/loomcycle loomcycle.dev The runtime substrate for agentic systems — one Go binary, six LLM providers, MCP-native, | 17 | Claude Code | 1 | 13,241 tok |
| klodr/gmail-mcp Gmail MCP server — scope-gated tools (readonly / send / modify), path jails for attachment | 17 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,076 tok |
| Caprista/KarvyLoop The agent that learns how you decide - and proves it by never deciding for you. A local-fi | 17 | Claude Code | 1 | — |
| stackhawk/agent-skills docs.stackhawk.com Security testing skills for AI coding agents. Find and fix exploitable vulnerabilities wit | 16 | Claude Code, Codex, OpenCode | 2 | 2,262 tok |
| authprobe/authprobe authprobe.com authprobe pinpoints MCP OAuth failures | 16 | Codex, OpenCode | 1 | 1,121 tok |
| renatobardi/hapai renatobardi.github.io Deterministic guardrails for AI coding assistants. Enforce rules via Bash hooks before exe | 16 | Claude Code, Codex, OpenCode | 2 | 13,646 tok |
| apache/axis-axis2-c-core axis.apache.org Apache Axis2/C - JSON/REST and SOAP web services framework in C. Runs as an Apache httpd m | 16 | Codex, OpenCode | 1 | 1,947 tok |
| badchars/github-security-mcp GitHub security posture analysis for AI agents — 39 MCP tools, 45 checks across org, repos | 16 | Claude Code | 1 | 1,080 tok |
| gpt-cmdr/ras-commander-mcp MCP Server to Access HEC-RAS Project Data via Claude Desktop, Claude Code and other LLMs | 16 | Claude Code, Codex, OpenCode | 2 | 373 tok |
| code-yeongyu/codex-rules Codex plugin that injects project rule files into model context through lifecycle hooks. | 16 | Claude Code, Codex, OpenCode | 1 | 377 tok |
| alfredkzr/aws-iam-identity-center-security-governance-dashboard Open-source governance dashboard for AWS IAM Identity Center. Visualize who has access to | 16 | Claude Code | 1 | 1,145 tok |
| jayelbotvibe-web/hermes-pentest-lab jayelbotvibe-web.github.io AI-orchestrated, Kali-native pentesting lab: an MCP tool-server with scope/VPN/rate/audit | 16 | Claude Code | 1 | 1,683 tok |
| VelkyVenik/missingmcp missingmcp.com MissingMCP — your data, in Claude. OAuth 2.1 gateway hosting the MCP servers Claude is mis | 16 | Claude Code | 1 | 5,579 tok |