986 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,473Claude Code6,589Data and AI3,693Backend and APIs3,491Languages3,403Planning3,201Git and workflow3,131Code review2,731Memory and context2,354Testing2,335DevOps and cloud2,298Research2,288
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| thedatakey/apollyon Evidence-first source security scanner for human-written and AI-generated code. Rust CLI w | 1 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 938 tok |
| Firmislabs/firmis-scanner firmislabs.com AI agent runtime security scanner - detect malicious behavior in Claude Skills, MCP Server | 1 | Claude Code, Codex, OpenCode | 2 | 3,779 tok |
| bugroo/ubuntu-server-audit-eu Read-only Ubuntu/Linux server audit skill for MSP readiness and EU cybersecurity complianc | 1 | Codex, OpenCode | 1 | 144 tok |
| rumotion/ai-agent-project-template One canonical instruction file. Many models. ~1.9K-token startup. A copyable template for | 1 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 7 | 1,494 tok |
| Nick2bad4u/SonarCloud-Skill npmjs.com AI skill for managing findings on SonarCloud / SonarQube | 1 | Codex, OpenCode | 1 | 435 tok |
| bhuvangupta/vapt-claude Full-spectrum web application VAPT skill for Claude Code, OpenCode, Codex CLI & Gemini CLI | 1 | Codex, Gemini CLI, OpenCode | 2 | 1,377 tok |
| yunseo-kim/agent-toolbox A trusted, curated cross-tool registry for agent components, with end-to-end provenance an | 1 | Codex, OpenCode | 1 | 4,186 tok |
| ecodelearn/template-claude-code-ts npmjs.com Agent Harness — transactional npx installer that adapts one canonical template to Claude C | 1 | Claude Code, Codex, Gemini CLI, OpenCode | 6 | 1,578 tok |
| zexion7873/copilot-setting Agentic context engineering for GitHub Copilot — agents route, skills execute, instruction | 1 | Claude Code, Codex, GitHub Copilot, OpenCode | 25 | 11,144 tok |
| JKasteele/ai-act-companion huggingface.co Local-first, explainable EU AI Act risk classifier with risk-assessment/DPIA/bias/AI-secur | 1 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 546 tok |
| co-native-ab/graphdo-ts A TypeScript MCP server that gives AI agents scoped, low-risk access to Microsoft Graph. | 1 | Claude Code, Codex, OpenCode | 17 | 4,416 tok |
| coilyco-flight-deck/eco-mcp-app eco-mcp.coilysiren.me Inline Claude Desktop widget for any public Eco game server — live player counts, meteor c | 1 | Claude Code, Codex, OpenCode | 5 | 1,140 tok |
| ncsound919/VibeServe ncsound919.github.io **VibeServe** is the first full-stack, fully-integrated AI development platform. It unifie | 1 | Claude Code, OpenCode | 6 | — |
| abl030/pfsense-mcp MCP server for the pfSense REST API v2 — 677 tools for AI-driven firewall management | 1 | Claude Code, Codex, OpenCode | 2 | 2,909 tok |
| berntpopp/mgi-link genefoundry.org MCP server for MGI (Mouse Genome Informatics): mouse gene, allele, mutation and phenotype | 1 | Claude Code, Codex, OpenCode | 10 | 1,930 tok |
| yigitkonur/mcp-supersubagents MCP server for spawning and managing parallel AI agents. Run multiple autonomous Copilot s | 1 | Claude Code, Codex, GitHub Copilot, OpenCode | 9 | 9,778 tok |
| berntpopp/hpo-link genefoundry.org MCP server for the Human Phenotype Ontology (HPO): phenotype term lookup, the is_a hierarc | 1 | Claude Code, Codex, OpenCode | 10 | 3,019 tok |
| ex-nihilo-labs/agent-auth Zero-knowledge credential injection for AI agents. MCP server — agents authenticate withou | 1 | Codex, OpenCode | 1 | 784 tok |
| yamayued/j-platpat-mcp MCP server scaffold for the official JPO patent information acquisition API | 1 | Codex, OpenCode | 1 | 619 tok |
| dr-code/tessera Persistent codebase memory for Claude Code — open source MCP server | 1 | Claude Code, Codex, OpenCode | 14 | 3,241 tok |
| SinoEdwards/mail-agent-mcp Local-first email MCP server for Gmail and QQ Mail with secure OAuth, IMAP search/read, at | 1 | Claude Code, Codex, OpenCode | 2 | 967 tok |
| RZFL/agentops-mcp Local-first MCP safety agent for AI coding workflows with checkpoints and rollback. | 1 | Codex, OpenCode | 1 | 271 tok |
| Ailian0206/mcp-guardian Pre-call MCP tool policy gateway: allow / deny / redact / require_approval | 1 | Claude Code, Codex, OpenCode | 2 | 465 tok |
| lujoai/Lujo-MCP AI debugging and tracing platform based on the MCP protocol, providing session management, | 1 | Codex, OpenCode | 1 | 1,341 tok |
| Ylyass/mcp-privilege-profiler Task-scoped least-privilege security proxy and Wazuh detection bridge for MCP-based AI age | 1 | Codex, OpenCode | 1 | 172 tok |
| nabheet/google-services-mcp MCP server for Google consumer services — Gmail, Calendar, Drive, Sheets, Docs, Slides, Yo | 1 | Codex, OpenCode | 1 | 1,393 tok |
| gugu9999gu/PC-CONTROL-MCP | 1 | Claude Code, Codex, GitHub Copilot, OpenCode | 9 | 2,466 tok |
| danveil/mcp-security-inspector Explainable static security analysis for MCP tool metadata, including tool-poisoning indic | 1 | Codex, OpenCode | 1 | 560 tok |
| hygef-v4/youtube-studio-mcp hygef-v4.github.io High-performance, zero-dependency MCP server connecting AI assistants (Claude, Cursor, Ant | 1 | Claude Code, Codex, OpenCode | 2 | 5,542 tok |
| jakub-lapinski/google-calendar-mcp-serviceaccount Minimal Google Calendar MCP server authenticated via a service account — no OAuth consent | 1 | Codex, OpenCode | 1 | 1,179 tok |
| avivancos/open-english OLCP - a portable MCP server that owns identity, curriculum and the learner model, while a | 1 | Claude Code, Codex, OpenCode | 8 | 2,863 tok |
| cyanheads/osv-advisory-mcp-server npmjs.com Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full ad | 1 | Claude Code, Codex, OpenCode | 2 | 10,830 tok |
| cyanheads/pentest-mcp-server npmjs.com Offline methodology engine and payload workshop for authorized penetration testing, CTF, s | 1 | Claude Code, Codex, OpenCode | 2 | 10,384 tok |
| cyanheads/nist-nvd-mcp-server npmjs.com Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST Nat | 1 | Claude Code, Codex, OpenCode | 2 | 12,890 tok |
| cyanheads/attack-surface-mcp-server npmjs.com Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS | 1 | Claude Code, Codex, OpenCode | 2 | 13,280 tok |
| cyanheads/nws-weather-mcp-server npmjs.com Real-time US weather data via the National Weather Service API. Forecasts, alerts, and obs | 1 | Claude Code, Codex, OpenCode | 2 | 11,574 tok |
| drmf-cz/claude-beacon Claude Code MCP channel plugin — pushes GitHub Actions CI/CD results into running Claude C | 1 | Claude Code, Codex, OpenCode | 5 | 5,239 tok |
| zai-one/telegram-ads-mcp zai.one Unofficial MCP server for Telegram Ads (TON cabinet, Gram currency). For Claude, Cursor, a | 1 | Claude Code, Codex, OpenCode | 2 | 2,892 tok |
| purinzan/gx3-cli-mcp zenn.dev Trace a GX Works3 ladder without opening GX Works3 — read-only CLI + MCP server so anyone | 1 | Codex, OpenCode | 1 | 358 tok |
| aikadimsoy/kasa-mcp KASA MCP — a permission-brokered MCP server for agent memory. Local-first, encrypted at th | 1 | Claude Code, Codex, OpenCode | 3 | 1,870 tok |
| KevinTrinhDev/gaze It sees the page, and it acts. Drive a real, already logged-in browser from the CLI or ove | 1 | Codex, OpenCode | 1 | 1,394 tok |
| NexgenSystemsMX/scopegate Ephemeral credentials & persistent MCP connections for coding agents — the agent never hol | 0 | Claude Code, Codex, OpenCode | 2 | 3,678 tok |
| TheNickSanchez/passkey-mcp Cross-platform secrets manager for AI coding assistants — stores secrets in system keychai | 0 | Codex, OpenCode | 1 | 2,282 tok |
| ayhammouda/obd-mcp-server Safety-first, read-only MCP server for vehicle diagnostics with simulator-first OBD-II, EL | 0 | Codex, OpenCode | 1 | 489 tok |
| dinglebear-ai/connexin Connexin — human-approved SSH shell and file transfer as an MCP App | 0 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 265 tok |
| omamishra8051-source/PenTest-MCP | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| Jackson-DM/msp-tools-mcp | 0 | Claude Code, Codex, OpenCode | 3 | 193 tok |
| rosselps/whyguard npmjs.com Reconstructs why code exists and stops humans or agents from erasing that protection by ac | 0 | Claude Code, Codex, Kiro, OpenCode | 6 | 4,673 tok |
| frli4797/crowdsec-mcp CrowdSec-focused MCP server for safe, auditable security operations. | 0 | Codex, OpenCode | 1 | 945 tok |
| kappa9999/white-hat-agent Model-neutral cyber knowledge, orchestration, discovery, and MCP application layer for AI | 0 | Codex, OpenCode | 1 | 298 tok |