1,480 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,374Claude Code6,573Data and AI3,706Backend and APIs3,486Languages3,398Planning3,181Git and workflow3,100Code review2,701Memory and context2,354Testing2,311Research2,292DevOps and cloud2,282
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| marketcalls/openalgo docs.openalgo.in Open Source Algo Trading Platform for Everyone | 2,595 | Claude Code | 8 | 7,879 tok |
| lestrrat-go/jwx Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologie | 2,420 | Claude Code, Codex, OpenCode | 3 | 3,061 tok |
| samugit83/redamon An AI-powered agentic red team framework that automates offensive security operations, fro | 2,403 | Claude Code, Codex, OpenCode | 2 | 2,279 tok |
| allenymt/PrivacySentry Android privacy compliance remediation and detection tool using an annotation + ASM byteco | 2,290 | Claude Code | 1 | 1,561 tok |
| zakirkun/deep-eye Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, M | 2,285 | Claude Code, Codex, OpenCode | 8 | 2,919 tok |
| m14r41/PentestingEverything pentesting.m14r41.in Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | 2,066 | Claude Code, Codex | 1 | — |
| eugene1g/agent-safehouse agent-safehouse.dev Sandbox your local AI agents so they can read/write only what they need | 2,050 | Claude Code, Codex, OpenCode | 3 | 1,353 tok |
| jtblin/kube2iam kube2iam provides different AWS IAM roles for pods running on Kubernetes | 2,043 | Claude Code, Codex, Gemini CLI | 2 | 334 tok |
| evilsocket/legba legba.evilsocket.net The fastest and more comprehensive multiprotocol credentials bruteforcer / password spraye | 1,938 | Claude Code, Codex, OpenCode | 2 | 2,269 tok |
| trailofbits/publications trailofbits.com Publications from Trail of Bits | 1,886 | Claude Code | 1 | 1,671 tok |
| vstorm-co/full-stack-ai-agent-template vstorm-co.github.io Full-stack AI app generator — FastAPI + Next.js with AI Agents, RAG, streaming, auth, and | 1,879 | Claude Code, Codex, OpenCode | 2 | 2,284 tok |
| zakirkun/guardian-cli Guardian is a production-ready AI-powered penetration testing automation CLI tool that lev | 1,869 | Claude Code | 1 | 1,639 tok |
| j3ssie/metabigor OSINT power without API key hassle | 1,803 | Claude Code, Codex, OpenCode | 2 | 3,761 tok |
| duyet/bruteforce-database duyet.github.io Bruteforce database | 1,733 | Claude Code | 1 | 1,151 tok |
| aklivity/zilla docs.aklivity.io 🦎 A lightweight, multi-protocol gateway for event-driven applications and AI agents. Expo | 1,730 | Claude Code, Codex, OpenCode | 2 | 3,946 tok |
| wgpsec/AboutSecurity Everything for pentest. | A penetration testing knowledge base that captures security meth | 1,716 | Claude Code | 1 | — |
| isair/jarvis A 100% private AI voice assistant that lives on your computer (works offline). Talk natura | 1,713 | Claude Code | 4 | 3,082 tok |
| pixeltable/pixeltable docs.pixeltable.com The unified multimodal backend for AI data apps. Database, orchestration, and serving in o | 1,618 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 7,174 tok |
| relaticle/relaticle relaticle.com Open-source CRM with native AI agent support. 37 MCP tools, REST API, self-hosted. Built w | 1,605 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 30 | 29,684 tok |
| kenryu42/cc-safety-net ccsafetynet.com A pre-execution guard for AI coding agents. It blocks destructive Git and file system comm | 1,524 | Claude Code, Codex, OpenCode | 2 | 724 tok |
| six2dez/burp-ai-agent burp-ai-agent.six2dez.com Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy control | 1,487 | Claude Code, Codex, OpenCode | 2 | 1,273 tok |
| ChiChou/grapefruit codecolor.ist Open-source mobile security testing suite for iOS and Android. Previously Passionfruit | 1,380 | Claude Code, Codex, OpenCode | 2 | 440 tok |
| justrach/codedb codegraff.com Zig code intelligence server and MCP toolset for AI agents. Fast tree, outline, symbol, se | 1,372 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,700 tok |
| apache/struts struts.apache.org Apache Struts is a free, open-source, MVC framework for creating elegant, modern Java web | 1,366 | Claude Code, Codex, OpenCode | 10 | 1,836 tok |
| piomin/claude-ai-spring-boot Claude Code template for Spring Boot and other staff (included in the tags) | 1,286 | Claude Code | 1 | 450 tok |
| mrwadams/attackgen AttackGen is a cybersecurity incident response testing tool that leverages the power of la | 1,239 | Claude Code, Codex, OpenCode | 2 | 7,390 tok |
| grafbase/grafbase the-guild.dev [Acquired by The Guild] The Grafbase GraphQL Federation Gateway | 1,230 | Claude Code | 2 | 4 tok |
| affaan-m/agentshield cerebralvalley.ai AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, an | 1,137 | Claude Code, Codex | 2 | 942 tok |
| pashov/skills Pashov Audit Group Skills | 1,124 | Claude Code | 1 | 116 tok |
| vndee/llm-sandbox vndee.github.io Lightweight and portable LLM sandbox runtime (code interpreter) Python library. | 1,119 | Claude Code, GitHub Copilot | 2 | 4,844 tok |
| agentlas-ai/Agentlas-OS agentlas.cloud Agent OS: keep specialist agents in a hub, spin up a temporary orchestrator per task. Loca | 1,103 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 7,327 tok |
| prompt-security/clawsec prompt.security A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and va | 1,100 | Claude Code, Codex, OpenCode | 2 | 3,541 tok |
| TencentCloudBase/CloudBase-AI-Toolkit docs.cloudbase.net Backend for AI coding agents on CloudBase — database, auth, functions via Plugin, Skills & | 1,092 | Claude Code, Codex, OpenCode | 2 | 6,543 tok |
| DataDog/pup datadoghq.com Give your AI agent a Pup — a CLI companion with 200+ commands across 33+ Datadog products. | 1,001 | Claude Code, Codex, OpenCode | 2 | 1,841 tok |
| Pantheon-Security/medusa pantheonsecurity.io AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ | 976 | Claude Code | 1 | 2,806 tok |
| trailofbits/claude-code-devcontainer Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security a | 934 | Claude Code | 1 | — |
| agentic-community/mcp-gateway-registry agentic-community.github.io Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure | 895 | Claude Code | 1 | 15,542 tok |
| pocketpaw/pocketpaw pocketpaw.xyz Your AI agent in 30 seconds. Not 30 hours. Self-hosted, open-source personal AI with deskt | 877 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 6,715 tok |
| Skyvern-AI/rustwright Playwright's API on a Rust CDP engine — Chromium browser automation for Python & Node, no | 874 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 996 tok |
| jdevalk/specification.website specification.website Website specification — HTML, accessibility, security, SEO, agent-readiness. Platform-agno | 846 | Claude Code | 1 | 7,526 tok |
| luckyPipewrench/pipelock pipelab.org Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, | 835 | Claude Code, Codex, OpenCode | 2 | 2,750 tok |
| cyberkaida/reverse-engineering-assistant MCP server for reverse engineering tasks in Ghidra 👩💻 | 822 | Claude Code, Codex, GitHub Copilot, OpenCode | 7 | 4,764 tok |
| H-mmer/pentest-agents Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and | 815 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 63,845 tok |
| ThinkWatchProject/ThinkWatch thinkwat.ch Enterprise AI bastion host for secure AI API and MCP access, with unified proxying, RBAC, | 813 | Claude Code | 1 | 1,011 tok |
| cloudflare/mcp mcp.cloudflare.com MCP server for the Cloudflare API | 810 | Claude Code, Codex, OpenCode | 2 | 3,212 tok |
| irsdl/webhacklist irsdl.github.io Archive of the Top 10 Web Hacking Techniques - every nominee since 2006, preserved | 808 | Claude Code, Codex | 15 | 1,363 tok |
| hoophq/hoop hoop.dev One gateway in front of every protocol. Same policy across MCP, LLMs, databases and contai | 807 | Claude Code | 5 | 7,260 tok |
| apify/mcpc npmjs.com A universal CLI client for MCP. mcpc supports persistent sessions, stdio/HTTP, OAuth 2.1, | 767 | Claude Code | 1 | 12,679 tok |
| sgasser/pasteguard pasteguard.com AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI | 741 | Claude Code, Codex, OpenCode | 2 | 461 tok |
| borghei/Claude-Skills borghei.github.io 368 AI skills, 76 expert agents, and 859 stdlib Python tools for every team: engineering, | 714 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode | 8 | 9,493 tok |