2,139 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| chrischall/skylight-mcp Skylight Calendar MCP — read/write family calendar events, chores, rewards, and shared lis | 16 | Claude Code, Codex, OpenCode | 2 | 10,188 tok |
| snowdreamtech/template snowdreamtech.github.io An enterprise-grade, foundational template designed for multi-AI IDE collaboration. This r | 16 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 7 | 2,764 tok |
| daochild/agents-config Agents config for development | 16 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 4,074 tok |
| heikki-laitala/pruner Cut AI coding agent costs 15-62% and time 39-64%. Structural code indexing that gives Clau | 16 | Claude Code | 3 | 608 tok |
| iOSDevSK/mcp-for-woocommerce mcpforwoocommerce.com WooCommerce MCP Server — WordPress community plugin implementing the Model Context Protoco | 15 | Codex, OpenCode | 1 | 1,039 tok |
| dcollaoa/bloodyad_mcp MCP Server for use bloodyAD with Claude or Gemini-CLI | 15 | Gemini CLI | 1 | 1,798 tok |
| matthiastjong/shellgate-legacy shellgate.ai Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail. | 15 | Claude Code, Codex, OpenCode | 2 | 2,794 tok |
| prodlint/prodlint prodlint.com Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find ou | 15 | Claude Code, Codex, OpenCode | 2 | 5,502 tok |
| whitequeen306/code-cortex-loop One-command AI code quality pipeline: review, security, tests, performance, simplify & cle | 15 | Codex, OpenCode | 1 | 1,601 tok |
| CsabaKovacs/rulesmith Local-first CLI + MCP server that maps repositories and generates evidence-backed AI agent | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 4,962 tok |
| sbom-tool/gh-guard sbom.tools CI/CD supply chain hardening plugin for Claude Code, designed for Rust projects | 15 | Claude Code | 1 | 1,432 tok |
| grcorsair/corsair grcorsair.com Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Cor | 15 | Codex, OpenCode | 1 | 1,401 tok |
| miapre/mimic-ai The design system copilot that builds Figma from HTML using your real components and token | 15 | Claude Code | 4 | 7,131 tok |
| Tommertom/sonos-ts-mcp Sonos MCP server for Sonos using Typescript | 15 | GitHub Copilot | 3 | 5,893 tok |
| ratel-ai/ratel-local MCP server library + ratel-local CLI: expose a Ratel tool catalog as a Model Context Proto | 15 | Claude Code, Codex, OpenCode | 2 | 479 tok |
| vaaraio/vaara vaara.io Accountable Autonomy: open-source evidence layer that gates every AI agent tool call again | 15 | Codex, OpenCode | 1 | 1,065 tok |
| sint-ai/sint-protocol sint.gg Open-source runtime security and governance for AI agents, MCP tools, robotics, industrial | 15 | Claude Code, Codex, OpenCode | 2 | 4,785 tok |
| UserB1ank/code-audit-system A CVE-oriented multi-agent code audit system implemented as a Claude Code skill. It orches | 15 | Claude Code | 1 | 876 tok |
| prompt-armor/prompt-armor pypi.org Open-source prompt injection detector — 5 layers, 91.7% F1, ~27ms, offline, Apache 2.0 | 15 | Claude Code | 1 | 1,684 tok |
| jeonghwanko/onesub npmjs.com Server-side receipt validation for react-native-iap. Apple StoreKit 2 + Google Play Billin | 15 | Claude Code, Codex, OpenCode | 3 | 7,673 tok |
| tarekmo0/HunterStick A persistent context and fieldcraft system for AI-assisted bug bounty hunting. | 15 | Claude Code, Codex, OpenCode | 37 | 7,495 tok |
| Wang-Yanting/PIMiner | 15 | Claude Code | 4 | 3,431 tok |
| zksecurity/zk-skills ZKSecurity's open-source AI-skills for pre-auditing ZK circuits | 15 | Claude Code | 1 | 136 tok |
| code-yeongyu/pi-rules Rule context loader extension for the pi coding agent | 15 | Codex, OpenCode | 1 | 790 tok |
| totalhack/zillion-web Zillion Web: A Demo UI and Web API for Zillion | 15 | GitHub Copilot | 1 | 103 tok |
| tae0y/python-project-template Project template for Claude Python Vibecoding workflow | 15 | Claude Code | 3 | — |
| hoangsonww/DevVerse-SWE-Blog devverse-swe.vercel.app 🪐 DevVerse CS Blog – A modern, high-performance blog app built with Next.js, Vercel, Supa | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 3,839 tok |
| Cynrath/agent-context-kit cynrath.github.io Offline-first toolkit for agent-ready repositories: readiness scoring, instruction graphs, | 14 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 4,051 tok |
| peacprotocol/peac peacprotocol.org Portable signed records for automated interactions. | 14 | Codex, OpenCode | 1 | 1,269 tok |
| joslat/maf-doctor AI-powered toolkit for Microsoft Agent Framework (MAF) migrations — agents, skills, MCP se | 14 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 7,410 tok |
| voodootikigod/skills-check skillscheck.ai The missing quality toolkit for Agent Skills | 14 | Claude Code, Codex, OpenCode | 2 | 7,374 tok |
| tigrisdata/mcp-oidc-provider tigrisdata.com Open-sourced mcp-oidc-provider: a minimal, vendor-neutral OIDC layer that sits between MCP | 14 | Claude Code, Codex, OpenCode | 2 | 639 tok |
| willwebster5/crowdstrike-mcp | 14 | Claude Code | 1 | — |
| adithyan-ak/agentmask adithyanak.com Mask your secrets from AI coding agents. Full context. Zero exposure. | 14 | Claude Code | 1 | 2,326 tok |
| supermhel/fengarde supermhel.github.io Open-source, self-hosted security pipeline for IT, AI and OT. Logs in. Evidence out.: OCSF | 14 | Claude Code | 1 | 1,211 tok |
| MinistryPlatform-Community/MPNext NextJS Application Integrated with MP Authentication and REST API | 14 | Claude Code | 4 | 6,329 tok |
| MingyiSecLab/Mingyi-Atlas Harness-driven terminal AI agent for authorized security assessment, with TUI, headless | 14 | Claude Code, Codex, OpenCode | 2 | 5,990 tok |
| devfullcycle/claude-subagents | 14 | Claude Code | 2 | — |
| Coveros/StrategiesforTestingAI Repo for Strategies for Testing AI-Based Systems Class | 14 | Claude Code, GitHub Copilot | 8 | 680 tok |
| arcobaleno64/agy-plugin-cc agy-plugin-cc is a Claude Code companion for running Gemini CLI or Antigravity CLI (agy) a | 14 | Claude Code | 1 | — |
| inevolin/agentic-ai-safety-and-security-program ai.nevolin.be Agentic AI Safety & Security Program - Built at Anthropic’s Claude Opus 4.7 Hackathon | 14 | Claude Code | 1 | 5,671 tok |
| shenjingnan/haimen Enter through this door, exit through that door. | 14 | Claude Code, Codex, OpenCode | 7 | 2,038 tok |
| confluentinc/claude-code-confluent-plugin A Claude Code plugin that lets developers build Confluent Cloud infrastructure and data st | 13 | Claude Code | 16 | 1,217 tok |
| Kaademos/secure-sdlc-agents owasp.org A team of Claude Code sub-agents that enforce security across the full SDLC, from ASVS req | 13 | Claude Code | 9 | 2,116 tok |
| djscheuf/agentic-dev-ecosystem-template Template Repo with The Ecosystem of Rules, Skills, and Workflows for development with Devi | 13 | Claude Code, Codex, OpenCode | 4 | 890 tok |
| KalarisLabs/Skill-Doctor Deterministic security analysis for agent skill files. | 13 | Claude Code, Codex, OpenCode | 3 | 1,336 tok |
| NERVsystems/cotlib cotlib is a secure, high-performance Go library for parsing, validating, and generating Cu | 13 | Claude Code, Codex, OpenCode | 2 | 1,170 tok |
| Threat-Vector-Security/guardian-agent Local workstation and network security with ContextCypher diagrams, threat analysis and GR | 13 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,991 tok |
| CES-Ltd/TitanClip ces-ltd.github.io AI Company Orchestration Platform — Deploy governed teams of autonomous AI agents with Run | 13 | Codex, OpenCode | 1 | 216 tok |
| vietanhdev/bulwark bulwark.nrl.ai A Linux host security scanner with a native CLI and desktop GUI — SSH/kernel/systemd harde | 13 | Claude Code, Codex, OpenCode | 2 | 13,788 tok |