1,172 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| agenthill/vaultpilot-mcp vaultpilot-mcp.ai Safety first. Hardware-verified DeFi for AI agents — designed for when the AI can be compr | 4 | Claude Code, Codex, OpenCode | 2 | 7,509 tok |
| beriktassuly/solana-audit-skill Evidence-backed Solana audit skill for Claude Code and Agent Skills: report-backed taxonom | 4 | Codex, OpenCode | 1 | 279 tok |
| thekie/read-no-evil-mcp A secure email gateway MCP server that protects AI agents from prompt injection attacks hi | 4 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,233 tok |
| Nosmoht/talos-mcp-server MCP server for Talos Linux cluster management via the native gRPC API | 4 | Claude Code, Codex, OpenCode | 18 | 9,678 tok |
| sukoji/loadout npmjs.com 🎯 Loadout — profile your project and gear up Claude Code with the right skills, MCP serve | 4 | Claude Code, Codex, OpenCode | 6 | 791 tok |
| arcjet/skills Skills to make your AI coding agent an Arcjet security expert. | 4 | Codex, OpenCode | 1 | 688 tok |
| rodrigopg/whatsapp-mcp WhatsApp MCP Server — community fork with LID contact fixes, group management, security ha | 4 | Claude Code, Codex, OpenCode | 2 | 1,067 tok |
| salingnh/android-reverse-engineering-mcp Claude Code skill to support Android app's reverse engineering. (Safe) | 4 | Codex, OpenCode | 1 | 1,089 tok |
| sandraschi/devices-mcp MCP server + web dashboard + Windows Tauri app for home LAN devices (Tapo, Hue, Ring, Nest | 4 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 7 | 3,339 tok |
| xsourabhsharma/ai-security-audit-pro Universal security-audit plugin and CLI engine for AI agents with OWASP-mapped reports for | 4 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 753 tok |
| MilindGaharwar/fettle pypi.org Open-source trust layer for AI coding agents: in-session quality, delegation-safe policy, | 4 | Claude Code, Codex, GitHub Copilot, OpenCode | 18 | 250 tok |
| snyk-labs/snyk-vulnbench vulnbench.com A benchmark harness for measuring how AI coding agents find and fix security vulnerabiliti | 4 | Claude Code, Codex, OpenCode | 12 | 3,693 tok |
| RedHatResearch/aibom-security AI BOM Security | 4 | Claude Code, Codex, OpenCode | 2 | 2,883 tok |
| vaquarkhan/compliance-agent-skills 30 Agent Skills for deterministic USA compliance auditing of AI agents — HIPAA, NIST AI RM | 4 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 2,822 tok |
| zai-one/telegram-ads-mcp zai.one MCP server for Telegram Ads (ads.telegram.org, TON): create, target, pause ads and read st | 4 | Claude Code, Codex, OpenCode | 2 | 413 tok |
| Muqaram0/oscp-companion oscp-companion.vercel.app OSCP methodology knowledge base with web UI and MCP server | 4 | Claude Code, Codex, OpenCode | 2 | 79 tok |
| arsenyspb/comet-boundary hashicorp.com React Single Page Application (SPA) web client for Hashicorp Boundary | 3 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,170 tok |
| renanflustosa/octo-cluster Lean Claude Code plugin: ship logical commits safely (direct or PR, never force-push), tur | 3 | Claude Code, Codex, OpenCode | 9 | 903 tok |
| JinNing6/CyberHuaTuo-Plugin AI Agent Error Doctor: paste MCP / LangChain / CrewAI tracebacks, get root cause, exact fi | 3 | Claude Code, Codex, OpenCode | 4 | 156 tok |
| soden46/engineer-flow Framework-agnostic AI engineering control plane with project-aware routing, 0–2 specialist | 3 | Codex, OpenCode | 1 | 587 tok |
| densmirnov/hidden-achievements-skill Sealed hidden daily achievements for team agents: anti-spam, prompt-injection safe, no ret | 3 | Codex, OpenCode | 1 | 2,394 tok |
| chtnnh/know-code kc.chtnnhfoundation.org k(no)w-code - your agents dont push until you know exactly whats changed | 3 | Claude Code, Codex, OpenCode | 3 | 362 tok |
| Calvin-LLC/agentic-hardening-skill Evidence-driven codebase hardening skill. Audits OWASP Top 10:2025, supply chain (SBOM vs | 3 | Codex, OpenCode | 1 | 91 tok |
| MuhammedZohaib/patchman Defensive AI security audit skill for Claude and Codex. Reviews codebases and web apps for | 3 | Claude Code, Codex, OpenCode | 2 | 250 tok |
| chris-peterson/ClaudeWatch chris-peterson.github.io ClaudeWatch: agents move fast; watch them closely. | 3 | Claude Code, Codex, OpenCode | 4 | 3,482 tok |
| punt-labs/beadle Claude Code via e-mail based on an addressbook with UNIX style rwx permissions per interac | 3 | Claude Code, Codex, OpenCode | 4 | 2,736 tok |
| ashlrai/ashlr-plugin plugin.ashlr.ai Token-efficiency plugin for Claude Code and Codex: MCP tools and hooks that replace high-v | 3 | Codex, OpenCode | 1 | 274 tok |
| HendrikReh/llm-guard AI Coding Hackathon Project - Experimenting with AI-assisted development workflows | 3 | Codex, OpenCode | 1 | 3,941 tok |
| juwonllee2024-dotcom/rulesync The ESLint & Babel for AI Agent Rules — Compile, lint, optimize, and sync instructions acr | 3 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 882 tok |
| kent-tokyo/shohei Rust MCP server with 168 security tools for Claude — DNS/DNSSEC, TLS, email security, OSIN | 3 | Codex, OpenCode | 1 | 2,537 tok |
| ggoodman/mcp-server-go Golang implementation of the streaming MCP HTTP transport with sessions, auth and horizont | 3 | Codex, OpenCode | 1 | 701 tok |
| onesimplecode/agent-engineering-standards This repo hands your AI coding agent a rulebook and your CI the checks that enforce it, ca | 3 | Codex, OpenCode | 1 | 7,802 tok |
| hidetsugu-miya/claude-plugins | 3 | Claude Code, Codex, OpenCode | 6 | 1,318 tok |
| SecondLifes/delphi-expert An opinionated ecosystem of rules, skills and steerings to elevate Delphi development to s | 3 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 11,182 tok |
| Suzu-Testing/metasploit-cursor-harness Agentic penetration testing harness bridging Cursor AI agents with Metasploit Framework vi | 3 | Claude Code, Codex, Cursor, OpenCode | 63 | 2,469 tok |
| calllint/calllint calllint.com Pre-flight risk linting for MCP and agent tools — check the blast radius before your agent | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,203 tok |
| Montimage/sec-mcp montimage.github.io A Python toolkit providing security checks for domains, URLs, IPs, and more. Integrate eas | 3 | Claude Code, Codex, OpenCode | 2 | 832 tok |
| drsh4dow/bevy-agent-feedback-plugin Let AI coding agents (Claude, Codex, Pi) see and control your Bevy game - remote input inj | 3 | Codex, OpenCode | 1 | 177 tok |
| Shad0wMazt3r/The-Scaffolding Solve CTF challenges, find bugs, better accuracy. Plug and play with any agent. | 3 | Claude Code, Codex, OpenCode | 2 | 1,137 tok |
| me-cedric/agent-compass Central agentic standards, guidelines, skills & bootstrap tooling for AI coding agents (Cl | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 1,283 tok |
| Mearman/agent-permissions npmjs.com Cross-agent permission policy for AI coding agents. MCP sync daemon, CLI, codecs, and eval | 3 | Claude Code, Codex, OpenCode | 2 | 4 tok |
| babywyrm/mcpnuke MCP red teaming & security scanner — enumerate, probe, and exploit Model Context Protocol | 3 | Codex, Cursor, OpenCode | 6 | 1,684 tok |
| brandonkramer/trelly Trello CLI + MCP server with multi-profile auth. JSON output for scripts and AI agents. | 3 | Codex, OpenCode | 1 | 1,084 tok |
| RichardGeorgeDavis/Codex-Workspace A local-first multi-repo workspace system with shared runtime control, memory, docs, and a | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 1,610 tok |
| Synapsor/Synapsor-Runner synapsor.ai Let AI agents query and update Postgres/MySQL without raw SQL, unrestricted schema access, | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,188 tok |
| icohangar-ops/software-factory SuperPlane Software Factory — hackathon (clone of superplane-software-factory) | 3 | Claude Code, Codex, OpenCode | 3 | 451 tok |
| oumaimah-QA/QIOS Structured QA skill framework for AI agents enabling consistent, risk-aware, and execution | 3 | Codex, OpenCode | 1 | 488 tok |
| viplavfauzdar/aisecops-interceptor aisecops.net AISecOps Interceptor — Runtime security layer for AI agents | 3 | Claude Code, Codex, OpenCode | 2 | 2,389 tok |
| BostonOrange/claude-code-framework Production-ready AI development workflow system for Claude Code — skills, CI/CD workflows, | 3 | Claude Code, Codex, OpenCode | 30 | 7,754 tok |
| dradoaica/cogov-a-sdlc Co-Governed Agentic SDLC (Software Development Life Cycle) | 3 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 10 | 252 tok |