2,137 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| gmh5225/awesome-game-security gs.awesome.rip awesome game security [Welcome to PR] | 3,650 | Codex, OpenCode | 1 | 359 tok |
| langchain-ai/langgraphjs docs.langchain.com Framework to build resilient language agents as graphs. | 3,377 | Codex, OpenCode | 1 | 499 tok |
| cool-team-official/cool-admin-midway cool-js.com 🔥 cool-admin (Midway edition), a powerful backend permission management framework featuri | 3,280 | Cursor | 1 | 807 tok |
| TanStack/ai tanstack.com 🤖 Type-safe, provider-agnostic TypeScript AI SDK for streaming chat, tool calling, agents | 3,258 | Claude Code, Codex, OpenCode | 14 | 7,965 tok |
| AutoMaker-Org/automaker automaker.app | 3,228 | Claude Code | 12 | 1,544 tok |
| samugit83/redamon redamon.org Open-source, self-hosted AI penetration testing framework: maps your attack surface into a | 3,221 | Claude Code, Codex, OpenCode | 2 | 2,719 tok |
| GH05TCREW/pentestagent PentestAgent is an AI agent framework for black-box security testing, supporting bug bount | 3,217 | Claude Code | 1 | 2,345 tok |
| KhazP/vibe-coding-prompt-template vibeworkflow.app Templates and workflow for generating PRDs, Tech Designs, and MVP and more using LLMs for | 3,191 | Claude Code | 5 | — |
| LLMQuant/quant-mind llmquantdata.com QuantMind is an open source agent-native knowledge extraction and retrieval framework for | 3,115 | Claude Code, Codex, OpenCode | 5 | 2,264 tok |
| chaterm/Chaterm chaterm.ai Open source AI terminal for cloud and infrastructure management, enabling you to deploy, t | 3,102 | Claude Code, Codex, OpenCode | 2 | 4,048 tok |
| visa/visa-vulnerability-agentic-harness Visa Vulnerability Agentic Harness | 3,010 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 4,744 tok |
| marketcalls/openalgo docs.openalgo.in The Open Source Trading Ecosystem for Everyone. | 2,919 | Claude Code | 10 | 12,362 tok |
| openlit/openlit docs.openlit.io OpenLIT is the open-source agent harness engineering platform: trace, evaluate, guard, and | 2,886 | Claude Code, Codex, OpenCode | 4 | 829 tok |
| Asymptote-Labs/agent-beacon beacon.sh The cross-harness, self-improving memory layer for AI agents. Join our community: https:// | 2,865 | Claude Code, Codex, OpenCode | 3 | 21,838 tok |
| sheeki03/tirith tirith.sh Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, | 2,769 | Claude Code | 2 | — |
| slavakurilyak/awesome-ai-agents Awesome list of 300+ agentic AI resources | 2,731 | Codex, OpenCode | 1 | 403 tok |
| derv82/wifit3 Wifite but USB-only & cross-platform. | 2,723 | Claude Code, Codex, OpenCode | 3 | 2,050 tok |
| SummerSec/ShiroAttack2 Comprehensive exploitation of Shiro deserialization vulnerabilities (for authorized testin | 2,634 | Claude Code, Codex, OpenCode | 3 | 2,182 tok |
| google/mantis cloud.google.com A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, an | 2,563 | Codex, OpenCode | 1 | 824 tok |
| nitrocloudofficial/nitrostack nitrostack.ai The full-stack TypeScript framework to build, test, and deploy production-ready MCP server | 2,528 | Claude Code | 1 | — |
| Django-CRM/Django-CRM bottlecrm.io BottleCRM: free, open-source (MIT) CRM with sales, support tickets and invoicing in one ap | 2,461 | Claude Code | 1 | 3,746 tok |
| lestrrat-go/jwx Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologie | 2,441 | Claude Code, Codex, OpenCode | 3 | 3,354 tok |
| zakirkun/deep-eye Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, M | 2,358 | Claude Code, Codex, OpenCode | 8 | 2,919 tok |
| Kritt-ai/open-kritt kritt.ai Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find a | 2,343 | Codex, OpenCode | 1 | 2,190 tok |
| allenymt/PrivacySentry Android privacy compliance remediation and detection tool using an annotation + ASM byteco | 2,292 | Claude Code | 1 | 1,561 tok |
| greenpau/caddy-security authcrunch.com 🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Imp | 2,262 | Codex, OpenCode | 1 | 3,359 tok |
| m14r41/PentestingEverything pentesting.m14r41.in Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | 2,171 | Claude Code, Codex | 1 | — |
| eugene1g/agent-safehouse agent-safehouse.dev Sandbox your local AI agents so they can read/write only what they need | 2,121 | Claude Code, Codex, OpenCode | 3 | 1,349 tok |
| uber/ADR arxiv.org ADR secures enterprise AI agents through observability, security benchmarking, and threat | 2,083 | Claude Code | 1 | — |
| jtblin/kube2iam kube2iam provides different AWS IAM roles for pods running on Kubernetes | 2,043 | Claude Code, Codex, Gemini CLI | 2 | 334 tok |
| croffasia/itsaplan itsaplan.dev ⭐️⭐️⭐️ Open-source, self-hosted alternative to Linear and Plane. Project management and is | 2,005 | Claude Code, Codex, OpenCode | 5 | 3,848 tok |
| mcollina/skills My own collection of skills for modern Node.js development | 1,960 | Codex, OpenCode | 1 | 652 tok |
| vstorm-co/full-stack-ai-agent-template vstorm-co.github.io Full-stack AI app generator — FastAPI + Next.js with AI Agents, RAG, streaming, auth, and | 1,958 | Claude Code, Codex, OpenCode | 2 | 2,296 tok |
| evilsocket/legba legba.evilsocket.net The fastest and more comprehensive multiprotocol credentials bruteforcer / password spraye | 1,951 | Claude Code, Codex, OpenCode | 2 | 2,269 tok |
| trailofbits/publications trailofbits.com Publications from Trail of Bits | 1,915 | Claude Code | 1 | 1,671 tok |
| zakirkun/guardian-cli Guardian is a production-ready AI-powered penetration testing automation CLI tool that lev | 1,897 | Claude Code | 1 | 1,639 tok |
| cloudflare/workers-oauth-provider OAuth provider library for Cloudflare Workers | 1,889 | Codex, OpenCode | 1 | 3,089 tok |
| j3ssie/metabigor OSINT power without API key hassle | 1,858 | Claude Code, Codex, OpenCode | 2 | 3,761 tok |
| anthropics/claude-agent-sdk-typescript | 1,835 | Claude Code | 2 | 492 tok |
| wgpsec/AboutSecurity Everything for pentest. | A penetration testing knowledge base that captures security meth | 1,811 | Claude Code | 1 | — |
| kenryu42/cc-safety-net ccsafetynet.com A pre-execution guard for AI coding agents. It blocks destructive Git and file system comm | 1,798 | Claude Code, Codex, OpenCode | 2 | 2,162 tok |
| relaticle/relaticle relaticle.com Open-source CRM with native AI agent support. 37 MCP tools, REST API, self-hosted. Built w | 1,789 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 32 | 50,090 tok |
| 0xSteph/pentest-ai pentestai.xyz Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; v | 1,780 | Codex, OpenCode | 1 | 793 tok |
| duyet/bruteforce-database duyet.github.io Bruteforce database | 1,760 | Claude Code | 1 | 1,151 tok |
| aklivity/zilla docs.aklivity.io 🦎 A lightweight, streaming-native, multi-protocol gateway for AI, APIs, and real-time dat | 1,688 | Claude Code, Codex, OpenCode | 2 | 4,561 tok |
| agentlas-ai/Agentlas-OS agentlas.cloud Agent OS: keep specialist agents in a hub, spin up a temporary orchestrator per task. Loca | 1,584 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 7,751 tok |
| microsoft/hve-core A refined collection of Hypervelocity Engineering components (instructions, prompts, agent | 1,580 | GitHub Copilot | 7 | 14,577 tok |
| six2dez/burp-ai-agent burp-ai-agent.six2dez.com Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy control | 1,557 | Claude Code, Codex, OpenCode | 2 | 1,285 tok |
| GreenSheep01201/claw-empire Command Your AI Agent Empire from the CEO Desk — A local-first AI agent office simulator t | 1,427 | Codex, OpenCode | 1 | 4,618 tok |
| ChiChou/grapefruit codecolor.ist Open-source mobile security testing suite for iOS and Android. Previously Passionfruit | 1,400 | Claude Code, Codex, OpenCode | 2 | 440 tok |