973 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,374Claude Code6,573Data and AI3,706Backend and APIs3,486Languages3,398Planning3,181Git and workflow3,100Code review2,701Memory and context2,354Testing2,311Research2,292DevOps and cloud2,282
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| vstorm-co/full-stack-ai-agent-template vstorm-co.github.io Full-stack AI app generator — FastAPI + Next.js with AI Agents, RAG, streaming, auth, and | 1,879 | Claude Code, Codex, OpenCode | 2 | 2,284 tok |
| cloudflare/workers-oauth-provider OAuth provider library for Cloudflare Workers | 1,869 | Codex, OpenCode | 1 | 2,417 tok |
| j3ssie/metabigor OSINT power without API key hassle | 1,804 | Claude Code, Codex, OpenCode | 2 | 3,761 tok |
| aklivity/zilla docs.aklivity.io 🦎 A lightweight, multi-protocol gateway for event-driven applications and AI agents. Expo | 1,730 | Claude Code, Codex, OpenCode | 2 | 3,946 tok |
| 0xSteph/pentest-ai pentestai.xyz Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; v | 1,652 | Codex, OpenCode | 1 | 793 tok |
| pixeltable/pixeltable docs.pixeltable.com The unified multimodal backend for AI data apps. Database, orchestration, and serving in o | 1,618 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 7,174 tok |
| relaticle/relaticle relaticle.com Open-source CRM with native AI agent support. 37 MCP tools, REST API, self-hosted. Built w | 1,608 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 30 | 29,684 tok |
| kenryu42/cc-safety-net ccsafetynet.com A pre-execution guard for AI coding agents. It blocks destructive Git and file system comm | 1,526 | Claude Code, Codex, OpenCode | 2 | 724 tok |
| six2dez/burp-ai-agent burp-ai-agent.six2dez.com Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy control | 1,488 | Claude Code, Codex, OpenCode | 2 | 1,273 tok |
| ChiChou/grapefruit codecolor.ist Open-source mobile security testing suite for iOS and Android. Previously Passionfruit | 1,381 | Claude Code, Codex, OpenCode | 2 | 440 tok |
| justrach/codedb codegraff.com Zig code intelligence server and MCP toolset for AI agents. Fast tree, outline, symbol, se | 1,375 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,700 tok |
| GreenSheep01201/claw-empire Command Your AI Agent Empire from the CEO Desk — A local-first AI agent office simulator t | 1,372 | Codex, OpenCode | 1 | 4,618 tok |
| apache/struts struts.apache.org Apache Struts is a free, open-source, MVC framework for creating elegant, modern Java web | 1,366 | Claude Code, Codex, OpenCode | 10 | 1,836 tok |
| neurogen-dev/NeuroAPI neuroapi.host NeuroAPI: a Russian AI API for Codex CLI and Claude Code — secure one-click installers for | 1,320 | Codex, OpenCode | 1 | 148 tok |
| uphiago/recon-skills hiago.sh Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain t | 1,245 | Codex, OpenCode | 1 | 900 tok |
| mrwadams/attackgen AttackGen is a cybersecurity incident response testing tool that leverages the power of la | 1,239 | Claude Code, Codex, OpenCode | 2 | 7,390 tok |
| mrwadams/stride-gpt stridegpt.streamlit.app An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat m | 1,112 | Codex, OpenCode | 1 | 4,122 tok |
| agentlas-ai/Agentlas-OS agentlas.cloud Agent OS: keep specialist agents in a hub, spin up a temporary orchestrator per task. Loca | 1,103 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 7,327 tok |
| prompt-security/clawsec prompt.security A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and va | 1,100 | Claude Code, Codex, OpenCode | 2 | 3,541 tok |
| TencentCloudBase/CloudBase-AI-Toolkit docs.cloudbase.net Backend for AI coding agents on CloudBase — database, auth, functions via Plugin, Skills & | 1,094 | Claude Code, Codex, OpenCode | 2 | 6,543 tok |
| google/mantis cloud.google.com A modular, stack-agnostic toolkit of security review skills for AI coding agents to autono | 1,030 | Codex, OpenCode | 1 | 670 tok |
| DataDog/pup datadoghq.com Give your AI agent a Pup — a CLI companion with 200+ commands across 33+ Datadog products. | 1,001 | Claude Code, Codex, OpenCode | 2 | 1,841 tok |
| SylphxAI/pdf-reader-mcp sylphxai.github.io Give your AI agent eyes for PDFs — structured text, tables, OCR, visual evidence, and page | 917 | Codex, OpenCode | 19 | 690 tok |
| pocketpaw/pocketpaw pocketpaw.xyz Your AI agent in 30 seconds. Not 30 hours. Self-hosted, open-source personal AI with deskt | 878 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 6,715 tok |
| Skyvern-AI/rustwright Playwright's API on a Rust CDP engine — Chromium browser automation for Python & Node, no | 875 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 996 tok |
| TalEliyahu/Awesome-AI-Security awesomeaisecurity.com Curated resources, research, and tools for securing AI systems | 862 | Codex, OpenCode | 1 | 759 tok |
| luckyPipewrench/pipelock pipelab.org Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, | 835 | Claude Code, Codex, OpenCode | 2 | 2,750 tok |
| cyberkaida/reverse-engineering-assistant MCP server for reverse engineering tasks in Ghidra 👩💻 | 823 | Claude Code, Codex, GitHub Copilot, OpenCode | 7 | 4,764 tok |
| google/sam sam-mesh.dev SAM Sovereign Agent Mesh | 822 | Codex, OpenCode | 1 | 1,068 tok |
| H-mmer/pentest-agents Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and | 817 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 63,845 tok |
| cloudflare/mcp mcp.cloudflare.com MCP server for the Cloudflare API | 812 | Claude Code, Codex, OpenCode | 2 | 3,212 tok |
| FrancescoStabile/numasec The AI Agent for Cyber Security. | 754 | Codex, OpenCode | 1 | 2,610 tok |
| sgasser/pasteguard pasteguard.com AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI | 741 | Claude Code, Codex, OpenCode | 2 | 461 tok |
| hadriansecurity/OpenHack Lightweight, file-based workspace for source-guided whitebox security review. | 738 | Codex, OpenCode | 1 | 2,001 tok |
| ZeroLeaks/zeroleaks zeroleaks.ai AI Security Scanner - Test your AI systems for prompt injection and extraction vulnerabili | 732 | Codex, OpenCode | 1 | 2,649 tok |
| borghei/Claude-Skills borghei.github.io 368 AI skills, 76 expert agents, and 859 stdlib Python tools for every team: engineering, | 717 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode | 8 | 9,493 tok |
| solokeys/solo2 solo2.dev Solo 2 firmware in Rust | 708 | Codex, OpenCode | 1 | 1,317 tok |
| pdovhomilja/nextcrm-app demo.nextcrm.io NextCRM — Open-source CRM built with Next.js 16, React 19, PostgreSQL, Prisma 7, and shadc | 690 | Codex, OpenCode | 1 | 1,428 tok |
| arcjet/arcjet-js arcjet.com Runtime security for AI apps and agents: prompt injection detection, tool-call authorizati | 682 | Codex, OpenCode | 1 | 452 tok |
| duriantaco/skylos skylos.dev Open source local-first PR scanner that finds dead code, security bugs, secrets, quality r | 671 | Claude Code, Codex, OpenCode | 4 | 1,138 tok |
| Zyrexnn/Cybermes Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes | 668 | Codex, Cursor, OpenCode | 2 | 2,021 tok |
| paradigmxyz/iron-proxy docs.iron.sh An egress firewall for untrusted workloads. | 660 | Codex, OpenCode | 1 | 1,429 tok |
| s0ld13rr/pentestcode PentestCode - Multi-agent AI penetration testing system with persistent engagement state, | 655 | Claude Code, Codex, OpenCode | 2 | 11,646 tok |
| emiliaprotocol/emilia-protocol emiliaprotocol.ai Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned ma | 649 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 1,680 tok |
| SonarSource/sonarqube-mcp-server sonarsource.com Official SonarQube MCP Server for code quality and security in AI agents | 637 | Codex, OpenCode | 1 | 2,801 tok |
| alibaba/anolisa agentic-os.sh ANOLISA (Agentic Nexus Operating Layer & Interface System Architecture) | Agentic OS with | 619 | Codex, OpenCode | 1 | 5,082 tok |
| emersonfelipesp/netbox-proxbox emersonfelipesp.com Netbox Plugin for integration between Proxmox and Netbox | 593 | Claude Code, Codex, OpenCode | 2 | 45,745 tok |
| KeyValueSoftwareSystems/agent-opfor Open-source adversary emulation for AI agents and MCP servers. | 577 | Claude Code, Codex, OpenCode | 2 | 8,568 tok |
| thunder-id/thunderid thunderid.dev ThunderID is a high-performance, open-source identity stack designed for developers to sec | 574 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 1,505 tok |
| faiscadev/fakecloud fakecloud.dev Free, open-source AWS emulator. LocalStack alternative: 105 services, 7,404 operations, tr | 542 | Codex, OpenCode | 1 | 2,606 tok |