1,980 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,374Claude Code6,573Data and AI3,706Backend and APIs3,486Languages3,398Planning3,181Git and workflow3,100Code review2,701Memory and context2,354Testing2,311Research2,292DevOps and cloud2,282
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| langchain-ai/langgraphjs docs.langchain.com Framework to build resilient language agents as graphs. | 3,251 | Claude Code, Codex, OpenCode | 2 | 551 tok |
| AutoMaker-Org/automaker automaker.app | 3,217 | Claude Code | 12 | 1,544 tok |
| TanStack/ai tanstack.com 🤖 Type-safe, provider-agnostic TypeScript AI SDK for streaming chat, tool calling, agents | 3,073 | Claude Code, Codex, OpenCode | 12 | 7,416 tok |
| GH05TCREW/pentestagent PentestAgent is an AI agent framework for black-box security testing, supporting bug bount | 3,046 | Claude Code | 1 | 2,345 tok |
| KhazP/vibe-coding-prompt-template vibeworkflow.app Templates and workflow for generating PRDs, Tech Designs, and MVP and more using LLMs for | 3,040 | Claude Code | 5 | — |
| chaterm/Chaterm chaterm.ai Open source AI terminal for cloud and infrastructure management, enabling you to deploy, t | 3,034 | Claude Code, Codex, OpenCode | 2 | 3,932 tok |
| ccch1mneyyy/dsh-TUI dshtui.com DSH official WeChat featured TUI plugin — Claude Code style: whale bar, live status, strea | 2,850 | Claude Code, Codex, OpenCode | 9 | 2,096 tok |
| LLMQuant/quant-mind llmquantdata.com QuantMind is an agent-native knowledge extraction and retrieval framework for quantitative | 2,814 | Claude Code, Codex, OpenCode | 5 | 2,264 tok |
| openlit/openlit docs.openlit.io Open source platform for AI Engineering: OpenTelemetry-native LLM Observability, GPU Monit | 2,742 | Claude Code, Codex, OpenCode | 4 | 829 tok |
| visa/visa-vulnerability-agentic-harness Visa Vulnerability Agentic Harness | 2,725 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,632 tok |
| sheeki03/tirith tirith.sh Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, | 2,703 | Claude Code | 2 | — |
| SummerSec/ShiroAttack2 Comprehensive exploitation of Shiro deserialization vulnerabilities (for authorized testin | 2,624 | Claude Code, Codex, OpenCode | 3 | 2,182 tok |
| marketcalls/openalgo docs.openalgo.in Open Source Algo Trading Platform for Everyone | 2,595 | Claude Code | 8 | 7,879 tok |
| lestrrat-go/jwx Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologie | 2,420 | Claude Code, Codex, OpenCode | 3 | 3,061 tok |
| samugit83/redamon An AI-powered agentic red team framework that automates offensive security operations, fro | 2,403 | Claude Code, Codex, OpenCode | 2 | 2,279 tok |
| beenuar/AiSOC tryaisoc.com Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agen | 2,368 | Codex, OpenCode | 1 | 6,497 tok |
| allenymt/PrivacySentry Android privacy compliance remediation and detection tool using an annotation + ASM byteco | 2,290 | Claude Code | 1 | 1,561 tok |
| zakirkun/deep-eye Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, M | 2,285 | Claude Code, Codex, OpenCode | 8 | 2,919 tok |
| m14r41/PentestingEverything pentesting.m14r41.in Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | 2,066 | Claude Code, Codex | 1 | — |
| Kritt-ai/open-kritt kritt.ai Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find a | 2,059 | Codex, OpenCode | 1 | 2,190 tok |
| eugene1g/agent-safehouse agent-safehouse.dev Sandbox your local AI agents so they can read/write only what they need | 2,050 | Claude Code, Codex, OpenCode | 3 | 1,353 tok |
| jtblin/kube2iam kube2iam provides different AWS IAM roles for pods running on Kubernetes | 2,043 | Claude Code, Codex, Gemini CLI | 2 | 334 tok |
| evilsocket/legba legba.evilsocket.net The fastest and more comprehensive multiprotocol credentials bruteforcer / password spraye | 1,938 | Claude Code, Codex, OpenCode | 2 | 2,269 tok |
| mcollina/skills My own collection of skills for modern Node.js development | 1,910 | Codex, OpenCode | 1 | 652 tok |
| trailofbits/publications trailofbits.com Publications from Trail of Bits | 1,886 | Claude Code | 1 | 1,671 tok |
| vstorm-co/full-stack-ai-agent-template vstorm-co.github.io Full-stack AI app generator — FastAPI + Next.js with AI Agents, RAG, streaming, auth, and | 1,879 | Claude Code, Codex, OpenCode | 2 | 2,284 tok |
| xerj-org/xerj xerj.org XERJ is the new way for AI to search data. Its autoindex capability activates agents to kn | 1,875 | Codex, OpenCode | 1 | 4,524 tok |
| cloudflare/workers-oauth-provider OAuth provider library for Cloudflare Workers | 1,870 | Codex, OpenCode | 1 | 2,417 tok |
| zakirkun/guardian-cli Guardian is a production-ready AI-powered penetration testing automation CLI tool that lev | 1,869 | Claude Code | 1 | 1,639 tok |
| j3ssie/metabigor OSINT power without API key hassle | 1,803 | Claude Code, Codex, OpenCode | 2 | 3,761 tok |
| duyet/bruteforce-database duyet.github.io Bruteforce database | 1,733 | Claude Code | 1 | 1,151 tok |
| aklivity/zilla docs.aklivity.io 🦎 A lightweight, multi-protocol gateway for event-driven applications and AI agents. Expo | 1,730 | Claude Code, Codex, OpenCode | 2 | 3,946 tok |
| wgpsec/AboutSecurity Everything for pentest. | A penetration testing knowledge base that captures security meth | 1,716 | Claude Code | 1 | — |
| isair/jarvis A 100% private AI voice assistant that lives on your computer (works offline). Talk natura | 1,713 | Claude Code | 4 | 3,082 tok |
| 0xSteph/pentest-ai pentestai.xyz Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; v | 1,652 | Codex, OpenCode | 1 | 793 tok |
| pixeltable/pixeltable docs.pixeltable.com The unified multimodal backend for AI data apps. Database, orchestration, and serving in o | 1,618 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 7,174 tok |
| relaticle/relaticle relaticle.com Open-source CRM with native AI agent support. 37 MCP tools, REST API, self-hosted. Built w | 1,605 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 30 | 29,684 tok |
| kenryu42/cc-safety-net ccsafetynet.com A pre-execution guard for AI coding agents. It blocks destructive Git and file system comm | 1,524 | Claude Code, Codex, OpenCode | 2 | 724 tok |
| six2dez/burp-ai-agent burp-ai-agent.six2dez.com Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy control | 1,487 | Claude Code, Codex, OpenCode | 2 | 1,273 tok |
| microsoft/hve-core A refined collection of Hypervelocity Engineering components (instructions, prompts, agent | 1,436 | GitHub Copilot | 7 | 13,397 tok |
| ChiChou/grapefruit codecolor.ist Open-source mobile security testing suite for iOS and Android. Previously Passionfruit | 1,380 | Claude Code, Codex, OpenCode | 2 | 440 tok |
| justrach/codedb codegraff.com Zig code intelligence server and MCP toolset for AI agents. Fast tree, outline, symbol, se | 1,372 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,700 tok |
| GreenSheep01201/claw-empire Command Your AI Agent Empire from the CEO Desk — A local-first AI agent office simulator t | 1,370 | Codex, OpenCode | 1 | 4,618 tok |
| apache/struts struts.apache.org Apache Struts is a free, open-source, MVC framework for creating elegant, modern Java web | 1,366 | Claude Code, Codex, OpenCode | 10 | 1,836 tok |
| neurogen-dev/NeuroAPI neuroapi.host NeuroAPI: a Russian AI API for Codex CLI and Claude Code — secure one-click installers for | 1,320 | Codex, OpenCode | 1 | 148 tok |
| piomin/claude-ai-spring-boot Claude Code template for Spring Boot and other staff (included in the tags) | 1,286 | Claude Code | 1 | 450 tok |
| uphiago/recon-skills hiago.sh Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain t | 1,242 | Codex, OpenCode | 1 | 900 tok |
| mrwadams/attackgen AttackGen is a cybersecurity incident response testing tool that leverages the power of la | 1,239 | Claude Code, Codex, OpenCode | 2 | 7,390 tok |
| grafbase/grafbase the-guild.dev [Acquired by The Guild] The Grafbase GraphQL Federation Gateway | 1,230 | Claude Code | 2 | 4 tok |
| affaan-m/agentshield cerebralvalley.ai AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, an | 1,137 | Claude Code, Codex | 2 | 942 tok |