1,583 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| draugr-dev/draugr draugr.dev Security scanning for CI from one file: SAST, SCA, secrets, IaC and containers, with every | 8 | Claude Code | 1 | 3,078 tok |
| blackfoxxx/Mobix Authorized Android pentest lab, drivable by hand or by AI — Frida bypass chain, live traff | 8 | Claude Code | 1 | — |
| Quidli/connect-mcp connect.quid.li MCP server for agent identity & reputation: resolve social handles to wallet addresses, sc | 8 | Claude Code, Codex | 1 | — |
| 0xHoneyJar/loa-freeside Platform layer of the Loa protocol | 8 | Claude Code, Codex, OpenCode | 11 | 5,343 tok |
| snapsynapse/skill-provenance skillprovenance.dev Version identity and integrity verification for Agent Skills. Tracks versions, detects sta | 7 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 2,382 tok |
| steve-magne/hookstack hookstack.app Claude Code hooks catalogue — production-ready hooks for Claude Code, OpenAI Codex & GitHu | 7 | Claude Code, Codex, OpenCode | 28 | 9,006 tok |
| taniwhaai/arai arai.taniwha.ai Your AI assistant reads CLAUDE.md and ignores it anyway. Ārai makes instruction files enfo | 7 | Claude Code, Codex, OpenCode | 11 | 5,060 tok |
| frootai/frootai frootai.dev From the Roots to the Fruits ! | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 9,604 tok |
| Diplomat-ai/diplomat-agent diplomat.run What can your AI agent do to the real world? Scan your code. See which tool calls have zer | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,004 tok |
| Zenobia000/ai-agentic-coding-template_unified | 7 | Claude Code | 9 | — |
| ca-risken/risken-mcp-server RISKEN's official MCP Server | 7 | Claude Code | 1 | 1,322 tok |
| ramboz/jig A Claude Code and Codex plugin that scaffolds AI-native development practices into new pro | 7 | Claude Code, Codex, OpenCode | 8 | 6,940 tok |
| slavins-co/cellartracker-mcp A local MCP server to connect AI tools to your wine cellar | 7 | Claude Code | 4 | 306 tok |
| WasmAgent/wasmagent-js wasmagent.github.io Embedded agent runtime compliance layer — WASM sandbox, MCP firewall, capability manifests | 7 | Claude Code, Codex, OpenCode | 2 | 3,963 tok |
| jmagar/swag-mcp SWAG reverse proxy configuration management via MCP. Create, edit, view, and manage nginx | 7 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 2,374 tok |
| TyrusRC/praetor Agentic pentest & red-team harness via Burp Suite MCP toolkit | 7 | Claude Code, Codex, Gemini CLI, OpenCode | 8 | 12,159 tok |
| MadGapun/PBP Local AI job application assistant for the German-speaking job market (DACH) — job search, | 7 | Claude Code, Codex, OpenCode | 5 | 11,634 tok |
| omkhar/vulnerability-validation-skill | 7 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 5 | 3,231 tok |
| mozilla/blender mozilla.github.io | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 319 tok |
| brainbytes-dev/nextjs-expo-saas-starter Ship web + mobile SaaS in days. Next.js 16 · Expo SDK 55 · Stripe · RevenueCat · Better-Au | 7 | Claude Code | 1 | 2,183 tok |
| commitshow/production-audit legit.show Claude Code skill that audits a shipped repo for the production-readiness gaps ~70% of AI- | 7 | Claude Code | 1 | — |
| nimbus-agent/Nimbus nimbus-agent.dev On-call intelligence for DevOps and platform teams. Local-first AI agent over your tools — | 7 | Claude Code, Gemini CLI | 29 | 23,324 tok |
| cdeust/ai-architect-mcp-codebase ai-architect.tools AI Architect Codebase: cross-platform code intelligence MCP for Claude Code, Codex, Gemini | 7 | Claude Code, Codex, OpenCode | 8 | 429 tok |
| Neetx/ai-security-research-radar AI Security Research Radar — AI for security and security for AI | 7 | Claude Code, Codex, OpenCode | 14 | 3,004 tok |
| thehesiod/costco-mcp MCP server for Costco warehouse receipts and online orders (multi-account, Azure AD B2C au | 7 | Claude Code | 1 | 2,043 tok |
| s977043/river-review river-review.the3396.com Turn reviews into organizational decision assets. Review Judgment as Code for AI-assisted | 7 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 10 | 7,238 tok |
| HermeticOrmus/linux-sysadmin-skills A Claude Code skill bundle for Linux system administration — security, performance, diagno | 7 | Claude Code | 1 | 432 tok |
| elfa-ai/mcp Elfa MCP Server | 7 | Claude Code, Codex, OpenCode | 2 | 359 tok |
| badchars/steganography-mcp npmjs.com 128-tool MCP server for steganography analysis — LSB detection, chi-square steganalysis, R | 7 | Claude Code | 1 | 422 tok |
| martinhavel/cz-agents-mcp cz-agents.dev Czech & EU due-diligence / KYC-AML MCP servers — sanctions (EU+OFAC), insolvency (ISIR), V | 6 | Claude Code | 6 | — |
| paolovella/vellaveto Agentic security control plane for MCP and AI agent tool calls. MCP-native policy gateway | 6 | Claude Code | 1 | 9,274 tok |
| ArmisSecurity/armis-appsec-mcp AI-powered security scanning MCP plugin for Claude Code | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 8,554 tok |
| mtnyilmaz/agents | 6 | Claude Code, Codex, OpenCode | 57 | 2,391 tok |
| morooka-akira/aicm | 6 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 10 | 9,770 tok |
| PoulpYBifle/NCF-Coding-Best-Practices | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 7,859 tok |
| Contoso-State/red-team-agent-orchestration | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 49 | 3,541 tok |
| nerviq/nerviq nerviq.net Your agent docs lie. Nerviq finds the lies in 30 seconds — stale references, permission ex | 6 | Claude Code, Codex, OpenCode | 15 | 2,959 tok |
| danielealbano/mcp-for-azure-devops-boards A Model Context Protocol (MCP) server for interacting with Azure DevOps Boards and Work It | 6 | Claude Code | 2 | — |
| mbeato/APIMesh apimesh.xyz APIMesh — 23 pay-per-call web analysis APIs + 16-tool MCP server with autonomous API gener | 6 | Claude Code | 1 | 723 tok |
| DunkelCloud/ToolMesh toolmesh.io Self-hosted MCP gateway with authorization, credential injection, audit logging, and outpu | 6 | Claude Code | 1 | 1,408 tok |
| goklab/guardvibe guardvibe.dev Security infrastructure your AI can't be — deterministic, daily CVE intel past your model' | 6 | Claude Code | 1 | 597 tok |
| pitimon/claude-cybersecurity-skill Claude Code plugin — 18 cybersecurity domains: IR, DFIR, DevSecOps, SOC, Code Security, Co | 6 | Claude Code | 1 | 1,816 tok |
| jlevy/supply-chain-hardening Supply-chain payloads run at install, import, or repo-open time. Copy-pasteable hardening | 6 | Claude Code, Codex, OpenCode | 6 | 1,947 tok |
| 2389-research/fresh-eyes-review 2389-research.github.io Mandatory final sanity check before commits/PRs - catches security vulnerabilities, logic | 6 | Claude Code | 1 | 814 tok |
| NFTYoginis/agency-of-one nftyoginis.github.io A Claude Code template for running a content/design business as a solo operator. One orche | 6 | Claude Code | 4 | 1,973 tok |
| aarora79/claude-code-usage-analyzer Comprehensive cost & token usage analyzer for Claude Code with detailed breakdowns by mode | 6 | Claude Code | 3 | 2,771 tok |
| trongnguyenbinh/zalo-bot-mcp MCP channel server for the Zalo Bot API. Talk to your Claude Code session from Zalo, with | 6 | Claude Code | 8 | — |
| Sandeeprdy1729/timps timps-website.vercel.app The AI memory layer with 17 intelligence tools — catches contradictions, predicts burnout, | 6 | Claude Code, Codex, OpenCode | 2 | 24,995 tok |
| zebbern/pocmap zebbern.github.io MCP-native CVE, PoC & exploit discovery toolkit (Metasploit, Nuclei, GitHub & more) | 6 | Claude Code, Codex, OpenCode | 2 | 4,679 tok |
| badchars/mcp-security-scanner npmjs.com 55-tool MCP server for security scanning of MCP servers. Runtime inspection, AST-based SAS | 6 | Claude Code | 1 | 442 tok |