1,481 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,410Claude Code6,578Data and AI3,695Backend and APIs3,487Languages3,404Planning3,188Git and workflow3,106Code review2,712Memory and context2,351Testing2,325Research2,289DevOps and cloud2,283
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| TyrusRC/praetor Agentic pentest & red-team harness via Burp Suite MCP toolkit | 5 | Claude Code, Codex, OpenCode | 2 | 8,151 tok |
| danygiguere/audit-skills Language- and framework-agnostic audit checklists for AI coding agents — security, correct | 5 | Claude Code, Codex, OpenCode | 2 | 2,553 tok |
| zebbern/pocmap zebbern.github.io MCP-native CVE, PoC & exploit discovery toolkit (Metasploit, Nuclei, GitHub & more) | 5 | Claude Code, Codex, OpenCode | 2 | 4,679 tok |
| badarosama/mcp-control-plane Policy-based authorization middleware for MCP servers. Role-based tool filtering, call enf | 5 | Claude Code | 1 | 30 tok |
| sv-tools/scrypted-mcp-plugin Scrypted plugin that exposes a Streamable HTTP Model Context Protocol endpoint, with OAuth | 5 | Claude Code | 1 | 3,499 tok |
| mappedsky/seizu mappedsky.github.io A neo4j dashboard and reporting tool. | 5 | Claude Code | 1 | 6 tok |
| ayuksel-tenb/tenable-attack-mapper MCP server that maps Tenable Security Center findings to the MITRE ATT&CK framework, then | 5 | Claude Code | 1 | — |
| comisai/comis comis.ai Open-source security-first runtime for AI agents that learn and act across sessions. | 5 | Claude Code, Codex, OpenCode | 2 | 20,957 tok |
| BlockSecCA/joern-mcp MCP server wrapping Joern for AI-driven code security analysis | 5 | Claude Code | 2 | 347 tok |
| Mun1to/vidorq Open-source AI video editor built on DaVinci Resolve Free. Describe the edit, train it wit | 5 | Claude Code | 1 | — |
| agent-receipts/openclaw obsigna.dev Agent Receipts / Obsigna plugin for OpenClaw — cryptographically signed audit trail for ag | 5 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 1,940 tok |
| meltforce/vimmary vimmary.meltforce.org YouTube video summary service. Karakeep webhook → transcript → LLM summary → semantic sear | 5 | Claude Code | 2 | 6,730 tok |
| samonti86/jarvis Always-on Windows voice assistant with a 36-tool agentic layer (Claude). Local wake word + | 5 | Claude Code | 1 | 9,033 tok |
| zakariaf/SecScanMCP Comprehensive security scanner for MCP (Model Context Protocol) servers. 12+ analyzers, | 5 | Claude Code | 1 | 4,392 tok |
| miounet11/scagent 🔍 ShenCha - AI Code Audit Agent | Security Scanner, Vulnerability Detection, Performance | 5 | Claude Code | 1 | 774 tok |
| agentic-threat-modeling/MAESTRO agentic-threat-modeling.github.io OWASP MAESTRO Threat Modeling Playbook | 5 | Claude Code | 1 | 4,581 tok |
| avvocati-e-mac/AnonyMCP Server MCP locale che pseudonimizza documenti legali italiani prima di esporli a un LLM (p | 5 | Claude Code, Codex, OpenCode | 4 | 6,194 tok |
| snapsynapse/guidecheck guidecheck.org AI setup guides can hide instructions a model reads but a human never sees. GuideCheck is | 5 | Claude Code | 1 | 2,337 tok |
| NOMARJ/sigil sigilsec.ai Automated security auditing CLI for AI agent code — quarantine-first workflow for repos, p | 5 | Claude Code | 1 | 957 tok |
| flying-coyote/claude-code-project-best-practices Best practices and prompts for building excellent Claude Code projects | 5 | Claude Code | 5 | — |
| Falcon-Forge/PiRanha The Autonomous Bug-Bounty Swarm A school of 53 specialized AI security agents + a determi | 5 | Claude Code | 1 | 568 tok |
| tbartel74/owasp-agentic-threat-scanner vigilguard.ai Claude Code security auditor for agentic AI apps — 17 OWASP threats, 89 detection patterns | 5 | Claude Code | 2 | — |
| enuno/tailscale-acl Tailscale ACL managed by AI coding agents and automated GitOps workflows. | 5 | Claude Code, Codex, Cursor, OpenCode | 3 | 2,948 tok |
| andrescaicedom/tribuia-taller-seguridad Entorno de pentesting reproducible con aplicación web intencionalmente vulnerable (aproxim | 5 | Claude Code | 7 | — |
| Cyfrin/battlechain-lib | 5 | Claude Code | 3 | — |
| LaravelDaily/Claude-Code-Security-Check-Demo | 5 | Claude Code | 1 | 853 tok |
| yechao-zhang/red-team-agent-skills Claude Code skills for red teaming AI agent | 5 | Claude Code | 1 | 795 tok |
| prajapatimehul/comp-agent AWS compliance agent: Prowler + Claude code | 5 | Claude Code | 1 | 1,839 tok |
| kiruna-labs/picky-skills Ultra-thorough Claude Code skills for design, security, testing, and performance audits | 5 | Claude Code | 1 | 3,928 tok |
| GoogleChromeLabs/passkey-skills-demo | 5 | Claude Code, Codex | 1 | — |
| XuebinMa/agent-guard AI Agent permission enforcement and sandbox security SDK, extracted from claw-code | 5 | Claude Code, Codex, OpenCode | 5 | 3,521 tok |
| wyattowalsh/agents agents.w4w.dev AI agent artifacts, configs, skills, tools, and more | 5 | Claude Code, Codex, OpenCode | 33 | 10,786 tok |
| liyq0307/anti-distill-skills Anti-distillation skill package. | 5 | Claude Code, Codex | 6 | — |
| lyadhgod/antigravity-vscode Bring Google's Antigravity CLI (agy) into VS Code: an agentic coding companion with a Mate | 5 | Claude Code | 1 | — |
| mozilla/blender mozilla.github.io | 5 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 319 tok |
| harshith-vaddiparthy/skills-marketplace-outskill skill-marketplace-beta.vercel.app Enterprise-grade, security-first marketplace for AI agent skills — every skill is vetted b | 5 | Claude Code, Codex, OpenCode | 2 | 79 tok |
| Yamdy/agentforge agentforge-docs.vercel.app The Pipeline-first TypeScript Agent framework. | 5 | Claude Code | 4 | 2,888 tok |
| semiotic-ai/agentsec agentsec.sh Agent Audit scans AI agent skills for security vulnerabilities, scores them against the OW | 5 | Claude Code, Codex, OpenCode | 3 | 2,614 tok |
| puppi3s/mythos-anti-sabotage-guardrails Vendor-neutral integrity guardrails for autonomous agents and IDE harnesses. | 5 | Claude Code, Codex | 1 | — |
| fadhlirahim/claude-starter-kit Claude Code configuration kit for building fullstack TypeScript apps with TanStack Start, | 5 | Claude Code | 8 | 3,743 tok |
| Claw-Play/ClawPlay ClawPlay lets AI Agents (via X Claw) generate images, analyze vision, and synthesize speec | 5 | Claude Code | 1 | 820 tok |
| Spritualkb/CTFskill | 5 | Claude Code, Codex | 2 | — |
| bombe-match/bombe-poc | 5 | Claude Code, Codex, OpenCode | 3 | 457 tok |
| opnsrcntrbtr/TrustVault-PWA trust-vault-pwa.vercel.app TrustVault is a privacy-first zero-knowledge Progressive Web App (PWA) credential manager | 5 | Claude Code, Codex, GitHub Copilot, OpenCode | 5 | 4,178 tok |
| loglayer/loglayer-go go.loglayer.dev A modern logging library for Go that routes logs to various logging libraries, cloud provi | 5 | Claude Code, Codex, OpenCode | 4 | 5,730 tok |
| paulwu/agent365-management Notes on how to manage Agent IDs with Agent 365 in Entra | 5 | Claude Code, GitHub Copilot | 11 | 2,745 tok |
| ayhanmalkoc/pi-mono | 5 | Claude Code, Codex, OpenCode | 10 | 2,322 tok |
| mazumba/opencode-dockerized Run opencode inside a docker container with the docker cli installed and mounted socket. | 5 | Claude Code, OpenCode | 23 | — |
| Reedboot/Triage-Saurus Security Triage using AI | 5 | Claude Code, Codex, OpenCode | 12 | 68 tok |
| arsenyspb/comet-boundary hashicorp.com React Single Page Application (SPA) web client for Hashicorp Boundary | 5 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,170 tok |