1,583 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| FireFightLabs/firefight firefight.app Open-source AI SRE and incident management. Finds the root cause and fixes it. | 10 | Claude Code | 3 | 6,048 tok |
| erlef-cna/varsel Varsel is the software behind the EEF CNA. | 10 | Claude Code, Codex, OpenCode | 2 | 26,790 tok |
| 8NobleTruths/sabba pypi.org SABBA - Security Templates CLI & MCP Server for coding agents that prove every finding by | 9 | Claude Code | 1 | 712 tok |
| ukorvl/web-of-flaws A structured library of web security flaws for humans and coding agents with vulnerable ex | 9 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 923 tok |
| cylestio/agent-inspector inspector.cylestio.com Local open-source dev tool to debug, secure, and evaluate LLM agents. Provides static anal | 9 | Claude Code | 1 | 875 tok |
| mirinodev/maestro A CLI tool that conducts Git worktrees like an orchestra and accelerates parallel developm | 9 | Claude Code | 3 | 3,926 tok |
| Juwon1405/agentic-dart findevil.devpost.com Agentic-DART — autonomous detection & response agent. Architecture-first, not prompt-first | 9 | Claude Code, Codex, OpenCode | 2 | 2,541 tok |
| KumaBase/agent-base | 9 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 7 | 3,029 tok |
| sourjya/kiro-rails Steering files, hooks, and workflow scripts that give Kiro AI coding agent persistent engi | 9 | Claude Code | 34 | — |
| ArianHobson333/claude-bug-bounty-stack Complete Claude Code setup for bug bounty hunting — 99 skills, 22 slash commands, 10 agent | 9 | Claude Code | 1 | 500 tok |
| CaseyLabs/kc-secure-repo-template Security-hardened GitHub repository template, designed to prevent supply-chain attacks. In | 9 | Claude Code, Codex, OpenCode | 2 | 1,825 tok |
| chenghit/aws-waf-rules-reviewer An Agent Skill that reviews AWS WAF Web ACL configurations for security issues, misconfigu | 9 | Claude Code, Codex, OpenCode | 2 | 7,124 tok |
| Mocinjay/immunogen Static, offline-first security scanner for AI-built apps. 0–100 Ship Score across 11 categ | 9 | Claude Code | 1 | — |
| brandondees/code-quality-atlas From-first-principles research toward a standalone agent skill suite for code review & mai | 9 | Claude Code, Codex, OpenCode | 48 | 5,176 tok |
| AbdumajidRashidov/mycop abdumajidrashidov.github.io | 9 | Claude Code | 1 | 1,383 tok |
| blindpaylabs/blindpay-mcp blindpay.com Official BlindPay MCP server: stablecoin payouts, payins, quotes and receivers for global | 9 | Claude Code | 1 | 3,381 tok |
| MadaBurns/bv-mcp blackveilsecurity.com DNS, email-authentication, TLS and exposure scanning for AI agents: 81 MCP tools, scored 0 | 9 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 20 | 10,311 tok |
| acartag7/mcp-sso OAuth 2.1 and enterprise SSO for remote MCP servers without API keys in client configs. | 9 | Claude Code, Codex, OpenCode | 4 | 4,794 tok |
| shigechika/mcp-stdio Bidirectional stdio ↔ HTTP gateway for MCP servers — connect clients to remote servers or | 9 | Claude Code, GitHub Copilot | 2 | 8,253 tok |
| eriknewton/sanctuary-framework sanctuaryprotocol.ai Open source security for AI agents: an OS-enforced egress wall on macOS, and on Ubuntu 24. | 9 | Claude Code, Codex, OpenCode | 2 | 6,599 tok |
| LLMTooling/code-search-mcp Model Context Protocol server providing powerful and efficient codebase search tools, incl | 9 | Claude Code | 6 | 1,476 tok |
| aplaceforallmystuff/mcp-threatintel MCP server for unified threat intelligence - AlienVault OTX, AbuseIPDB, GreyNoise, and abu | 9 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 538 tok |
| inoX-Network/claude-code-safety-guard 3-level override system for Claude Code - prevents destructive system operations. Born fro | 9 | Claude Code, Codex, OpenCode | 2 | 1,224 tok |
| Lex6won/vibecode-checker A first-line security linter for quickly AI-generated code, checking it against South Kore | 9 | Claude Code | 2 | — |
| badchars/dns-security-mcp npmjs.com 104-tool DNS Security Intelligence MCP Server — DNSSEC, hijacking, tunneling, typosquattin | 9 | Claude Code | 1 | 444 tok |
| mukul975/BHUSA-Anthropic-CyberSecurity-Skills | 9 | Claude Code | 1 | 220 tok |
| SafetyMP/Autonomous-EHS-Management autonomous-ehs-management.vercel.app Self-hosted incident to verified CAPA, with a TRIR that uses annual hours when the month g | 9 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 24 | 2,203 tok |
| nirholas/onchain-agent-wallets nirholas.github.io Give an AI agent a real Solana wallet without giving it your money. The agent gets a spend | 9 | Claude Code, Codex, OpenCode | 2 | 412 tok |
| natesmalley/coral_collective The collective intelligence for evolutionary development - AI agents working as a unified | 9 | Claude Code | 11 | 556 tok |
| PMDevSolutions/Aurelius pmds.info A Claude Code toolkit for building React apps, from Figma designs to shipped product. Ship | 9 | Claude Code | 5 | 6,756 tok |
| ianlintner/rust-oauth2-server ianlintner.github.io Rust OAuth2 Server with Social Logins with observability. Typesafe and Actor System. | 9 | Claude Code, GitHub Copilot | 10 | 5,503 tok |
| aplaceforallmystuff/mcp-pihole MCP server for Pi-hole v6 API - control DNS blocking from Claude Code | 8 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 357 tok |
| creatornader/atrib atrib.dev Verifiable agent actions. Every action becomes signed context for the next. Ed25519 signat | 8 | Claude Code, Codex, OpenCode | 4 | 20,384 tok |
| iampantherr/SecureContext Persistent memory + security layer for Claude Code (MCP plugin). Agents remember your proj | 8 | Claude Code | 1 | 1,689 tok |
| berkcangumusisik/repo-seatbelt npmjs.com A safety layer for AI coding agents. CLAUDE.md/AGENTS.md generator, MCP runtime guardrail, | 8 | Claude Code, Codex, OpenCode | 2 | 1,503 tok |
| XuebinMa/AIWiki xuebinma.github.io AI-coding pitfalls & best practices, written from the AI's first-person POV — 76 entries a | 8 | Claude Code | 6 | 3,165 tok |
| Pantheon-Security/chrome-mcp-secure Secure ChromeMCP Server - Query and Debugging sites using Google Chrome with additional se | 8 | Claude Code | 1 | 1,339 tok |
| vepo/issues Sistema de Gestão de Mudanças | 8 | Claude Code, Codex, Cursor, OpenCode | 25 | 4,153 tok |
| piiiico/proof-of-commitment getcommit.dev Supply chain security risk scorer for npm, PyPI, Cargo, and Go — behavioral signals that c | 8 | Claude Code | 1 | 1,166 tok |
| OpenLatch/saferskills saferskills.ai Every AI skill, independently scanned. Public, open-source trust scoring for skills, MCP s | 8 | Claude Code | 5 | 2,588 tok |
| BrainWeb/payload-mcp-oauth npmjs.com OAuth 2.1 + PKCE + Dynamic Client Registration for Payload CMS MCP, so it connects to the | 8 | Claude Code | 2 | 864 tok |
| tb0hdan/wass-mcp Web Application Security Scanner MCP Server | 8 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 191 tok |
| snyk/saw-mcp | 8 | Claude Code, Codex, OpenCode | 2 | 1,968 tok |
| actual-software/actual-cli cli.actual.ai Architecture questions, answered from your ADRs. | 8 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,269 tok |
| P4ST4S/mcp-audit A transparent Go proxy that intercepts, signs, and audits all MCP tool calls between any c | 8 | Claude Code, Codex, OpenCode | 5 | 2,890 tok |
| abdullahkhawer/devops-skills A curated collection of DevOps Skills that enhance your development using AI to work smart | 8 | Claude Code | 1 | — |
| jgardner04/Ghost-MCP-Server An MCP Server for managing posts on Ghost CMS | 8 | Claude Code | 1 | 5,985 tok |
| chenyuxiaojin/cyxj-remotion-starter A workbench scaffold for directing Remotion to create videos with Claude Code: three-layer | 8 | Claude Code | 6 | 1,319 tok |
| sv-tools/scrypted-mcp-plugin Scrypted plugin that exposes a Streamable HTTP Model Context Protocol endpoint, with OAuth | 8 | Claude Code | 1 | 3,499 tok |
| kiruna-labs/picky-skills Ultra-thorough Claude Code skills for design, security, testing, and performance audits | 8 | Claude Code | 1 | 3,928 tok |