1,172 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| vectra-ai-research/vectra-soc-agent-starter Starter pack for building an AI SOC analyst on top of Vectra AI — AGENTS.md + agent skills | 3 | Codex, OpenCode | 1 | 1,779 tok |
| Aviator-Coding/home-ops | 3 | Claude Code, Codex, OpenCode | 28 | 4,343 tok |
| serenashenn3-art/wechat-forensic-pro wechat-forensic-pro | 3 | Claude Code, Codex, Cursor, Gemini CLI, OpenCode | 4 | 13,264 tok |
| brovar/10x-pentest 10x pentest workflow build on agentic skills | 3 | Claude Code, Codex | 20 | — |
| wallieinformal201/pentest-mcp-server Integrate penetration testing tools and payloads into your workflow through the Model Cont | 3 | Claude Code, Codex, OpenCode | 2 | 9,962 tok |
| nohosa001-pixel/security-gate-x402 npmjs.com The Zero-Trust Safety & Settlement Rail for Autonomous AI Agents. Sub-10ms deterministic g | 3 | Codex, OpenCode | 1 | 2,860 tok |
| stefanoverna/basecamp-mcp MCP server for Basecamp 3 with OAuth, TypeScript, and 47 tools for projects, messages, tod | 2 | Codex, OpenCode | 1 | 5,651 tok |
| Nizoka/pdfnative-mcp pdfnative.dev Official Model Context Protocol (MCP) server for local-first PDF/A generation. Empowers AI | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 13 | 11,342 tok |
| barateza/mcp-plesk-dev-docs A unified MCP server that indexes and retrieves Plesk documentation using vector embedding | 2 | Claude Code, Codex, GitHub Copilot | 7 | 2,967 tok |
| lm203688/aishield aishield.ai 🛡️ Agent-native AI tool security scanner. Scan MCP/Skill/GPT/Prompt for security risks. 4 | 2 | Claude Code, Codex, OpenCode | 2 | 3,994 tok |
| matematicsolutions/mcp-saos matematicsolutions.com MCP server for Polish common and Supreme Court case law via the SAOS API - verifiable cita | 2 | Claude Code, Codex, OpenCode | 3 | 1,314 tok |
| pduggusa/dugganusa-cli analytics.dugganusa.com CLI threat intel scanner + local STDIO MCP server: check IPs, domains, hashes, CVEs agains | 2 | Claude Code, Codex, OpenCode | 2 | 1,319 tok |
| revsmoke/promptrejectormcp Open-source MCP and HTTPS screening for prompts, skills, and tool descriptions using TypeS | 2 | Claude Code, Codex, OpenCode | 2 | 744 tok |
| AUTHENSOR/AUTHENSOR authensor.com We audit the instruments the AI industry measures itself with — and file every fix upstrea | 2 | Claude Code, Codex, Cursor, OpenCode | 3 | 2,309 tok |
| aby-agency/aby-claude-watcher Dashboard desktop pour monitorer en temps réel vos sessions Claude Code | 2 | Claude Code, Codex, OpenCode | 7 | 18,578 tok |
| LeonMelamud/claude-code-security-review AI-powered security audit skill for code changes with false positive filtering. Based on A | 2 | Codex, OpenCode | 1 | 530 tok |
| raccioly/websec-validator pypi.org Local-first security recon for AI coding agents: map attack surfaces, stage tailored probe | 2 | Codex, OpenCode | 1 | 2,781 tok |
| NexusOne23/noid-privacy-workstation noid-privacy.com 🛡️ Fully-hardened Security & Privacy OS based on Fedora 44 + GNOME · for Dev, Admin, Crea | 2 | Codex, OpenCode | 1 | 4,259 tok |
| php-workx/fuse A local firewall for AI agent commands | 2 | Claude Code, Codex, OpenCode | 2 | 2,996 tok |
| YankielDBC2/saas-cybersecurity Provider-aware Agent Skill for evidence-based SaaS security audits and regression-safe har | 2 | Codex, OpenCode | 1 | 335 tok |
| charliechenye/SkillGate chenyezhu.com Pre-merge and pre-install trust checks for AI-agent skills and MCP configurations. Scan ca | 2 | Codex, OpenCode | 1 | 477 tok |
| DjFikie25/shipkit Build full-stack Next.js and React Native apps with integrated auth, database, AI chat, an | 2 | Codex, OpenCode | 1 | 3,842 tok |
| yu-iskw/skill-inspector npmjs.com A sophisticated tool designed to bring quality and security to the world of AI Agent Skill | 2 | Claude Code, Codex, OpenCode | 2 | 617 tok |
| mirekondro/The-Pre-Flight-Check mirekondro.github.io ✈️ Stop your AI coding agent from declaring 'done' on broken code. Fail-fast quality gate: | 2 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 3,486 tok |
| cubxxw/agent-kit Public, versioned Agent Skills to safely bootstrap and sync Claude Code, Codex, Qwen Code, | 2 | Claude Code, Codex, OpenCode | 4 | 188 tok |
| getskillseal/skillseal getskillseal.github.io Self-verifying agent skills. Your seal of approval. 🦭 | 2 | Claude Code, Codex, OpenCode | 2 | 751 tok |
| AbhiiGatty/cld-flare-maxxing cld-flare-maxxing.abhiigatty.com Claude Code and Codex plugin that audits, explains, and safely changes Cloudflare. Read-on | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 12 | 3,719 tok |
| vaquarkhan/kafka-mcp-enterprise-server vaquarkhan.github.io A production-ready Model Context Protocol (MCP) server for Apache Kafka. Features Informat | 2 | Codex, GitHub Copilot, Cursor, OpenCode | 5 | 1,155 tok |
| circle-rd/upki-ca docs.circle-cyber.com A small PKI dedicated to be used in internal infrastructures and Docker deployment using T | 2 | Codex, OpenCode | 1 | 1,471 tok |
| hexxla/mcp-ratchet Go package for enforcing tool call order in MCP servers. Token-based dependency system wit | 2 | Claude Code, Codex, OpenCode, Windsurf | 17 | 1,910 tok |
| waleedkhanbaloch/claude-code-safety-net waleedkhanbaloch.github.io 🛡️ Enhance code safety with Claude Code Safety Net, a tool designed to identify and mitig | 2 | Claude Code, Codex, OpenCode | 2 | 3,226 tok |
| Taibur-Rahaman/Agent2Wp-AI-WordPress-Agent Security engine for WordPress AI Abilities — fail-closed risk classification, permission g | 2 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 714 tok |
| rashidazarang/email-intel Email infrastructure fingerprinting for macOS | 2 | Claude Code, Codex, OpenCode | 2 | 619 tok |
| aki0225/AgentToolGate A local AI Agent tool governance gateway: it does not prevent prompt injection, but preven | 2 | Claude Code, Codex, OpenCode | 2 | 807 tok |
| ArisRhiannon/vibecheck arisrhiannon.github.io Offline, no-AI "safe to ship?" gate for vibe-coded apps — finds the security mistakes AI c | 2 | Codex, OpenCode | 1 | 490 tok |
| decoy-run/decoy-redteam npmjs.com Autonomous red team for MCP servers. Sends adversarial payloads to your tools, proves expl | 2 | Codex, OpenCode | 1 | 1,499 tok |
| gordcurrie/unifi-mcp MCP server written in Go that exposes UniFi home-network operations as tools | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 2,405 tok |
| Coding-Dev-Tools/envault coding-dev-tools.github.io Sync, rotate, and manage .env files across environments securely | 2 | Codex, OpenCode | 1 | 584 tok |
| sdfdu/evopilot Local-first workflow compiler that turns repeated AI-agent work into evidence-backed, qual | 2 | Codex, OpenCode | 1 | 97 tok |
| 3z/hacktricks-mcp Fast, self-hostable MCP server giving AI agents token-authenticated full-text search over | 2 | Codex, OpenCode | 1 | 778 tok |
| ImBIOS/belifoa ⚡ High-performance, compact Linear client & MCP server for AI agents. Reduces prompt conte | 2 | Codex, OpenCode | 1 | 1,640 tok |
| selfradiance/agentgate-governed-writefile-demo Smallest outsider-readable proof path through AgentGate + MCP Firewall: governed write_fil | 2 | Codex, OpenCode | 1 | 108 tok |
| JSONbored/nightward nightward.aethereal.dev Local-first TUI for auditing AI agent state, MCP config, and dotfiles backup safety | 2 | Codex | 1 | — |
| albertik322-sudo/mcp-control-plane Open-source MCP 2.0 control plane for Windows, homelab, Docker, MikroTik, Home Assistant, | 2 | Claude Code, Codex, OpenCode | 3 | 163 tok |
| escoffier-labs/agentpantry brigade.tools Your agent machine needs your logins. Pantry ships them sealed. Opt-in AES-256-GCM browser | 2 | Codex, OpenCode | 1 | 1,257 tok |
| ShanHaiFish/dsh-plugin-security-review DSH dynamic Cordis plugin installation security review gate (DeepSeek Harness plugin insta | 2 | Codex, OpenCode | 1 | 1,751 tok |
| hatyibei/shingan AI Agent Workflow Static Analyzer — detect infinite loops, cost explosions, PII leak paths | 2 | Claude Code, Codex | 3 | — |
| vpeetla-ai/aegisai-enterprise-agent-platform aegisai-enterprise-agent-platform.vercel.app Enterprise agent governance control plane — AI Gateway, HITL, OPA policy, signed audit, Fi | 2 | Claude Code, Codex, Cursor, OpenCode | 14 | 389 tok |
| theMobiusStrip/agentpay-guard Fail-closed spend guard for x402 agent payments: stateful policy plugin, EIP-3009 replay m | 2 | Claude Code, Codex, OpenCode | 4 | 2,431 tok |
| Ashveil1/Elengenix AI-assisted orchestration for bug bounty hunting. Automates security tools for reconnaiss | 2 | Claude Code, Codex, OpenCode | 2 | 3,238 tok |