2,139 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| mukul975/BHUSA-Anthropic-CyberSecurity-Skills | 9 | Claude Code | 1 | 220 tok |
| SafetyMP/Autonomous-EHS-Management autonomous-ehs-management.vercel.app Self-hosted incident to verified CAPA, with a TRIR that uses annual hours when the month g | 9 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 24 | 2,203 tok |
| nirholas/onchain-agent-wallets nirholas.github.io Give an AI agent a real Solana wallet without giving it your money. The agent gets a spend | 9 | Claude Code, Codex, OpenCode | 2 | 412 tok |
| natesmalley/coral_collective The collective intelligence for evolutionary development - AI agents working as a unified | 9 | Claude Code | 11 | 556 tok |
| PMDevSolutions/Aurelius pmds.info A Claude Code toolkit for building React apps, from Figma designs to shipped product. Ship | 9 | Claude Code | 5 | 6,756 tok |
| ianlintner/rust-oauth2-server ianlintner.github.io Rust OAuth2 Server with Social Logins with observability. Typesafe and Actor System. | 9 | Claude Code, GitHub Copilot | 10 | 5,503 tok |
| SamErde/TheCleaners day3bits.com PowerShell module to clean the loose ends from your Windows Servers. | 9 | Codex, GitHub Copilot, OpenCode | 2 | 1,470 tok |
| aplaceforallmystuff/mcp-pihole MCP server for Pi-hole v6 API - control DNS blocking from Claude Code | 8 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 357 tok |
| creatornader/atrib atrib.dev Verifiable agent actions. Every action becomes signed context for the next. Ed25519 signat | 8 | Claude Code, Codex, OpenCode | 4 | 20,384 tok |
| ChangooLee/mcp-kr-legislation A Model Context Protocol (MCP) server integrating the Korean Ministry of Government Legisl | 8 | Codex, Cursor, OpenCode | 2 | 7,528 tok |
| S3DFX-CYBER/Claude-Skills-Security A production-grade security triage skill for AI agents. | 8 | Codex, OpenCode | 1 | 1,494 tok |
| agentverus/agentverus-scanner agentverus.ai Trust, but verify. Security scanner for AI agent skills. Detects prompt injection, data ex | 8 | Codex, OpenCode | 1 | 2,548 tok |
| iampantherr/SecureContext Persistent memory + security layer for Claude Code (MCP plugin). Agents remember your proj | 8 | Claude Code | 1 | 1,689 tok |
| berkcangumusisik/repo-seatbelt npmjs.com A safety layer for AI coding agents. CLAUDE.md/AGENTS.md generator, MCP runtime guardrail, | 8 | Claude Code, Codex, OpenCode | 2 | 1,503 tok |
| XuebinMa/AIWiki xuebinma.github.io AI-coding pitfalls & best practices, written from the AI's first-person POV — 76 entries a | 8 | Claude Code | 6 | 3,165 tok |
| wangdongzuopin/sentinel-skill Sentry, guarding code security. Code auditing, penetration testing, and CTF. | 8 | Codex, OpenCode | 1 | 342 tok |
| Pantheon-Security/chrome-mcp-secure Secure ChromeMCP Server - Query and Debugging sites using Google Chrome with additional se | 8 | Claude Code | 1 | 1,339 tok |
| vepo/issues Sistema de Gestão de Mudanças | 8 | Claude Code, Codex, Cursor, OpenCode | 25 | 4,153 tok |
| SylphxAI/filesystem-mcp npmjs.com ARCHIVED non-primary. Prefer Citra/Iris/Cue/Prism/Spine/Lookout. | 8 | Codex, OpenCode | 1 | 455 tok |
| nbiish/mcp-calc-tools | 8 | Codex, OpenCode | 1 | 3,864 tok |
| piiiico/proof-of-commitment getcommit.dev Supply chain security risk scorer for npm, PyPI, Cargo, and Go — behavioral signals that c | 8 | Claude Code | 1 | 1,166 tok |
| OpenLatch/saferskills saferskills.ai Every AI skill, independently scanned. Public, open-source trust scoring for skills, MCP s | 8 | Claude Code | 5 | 2,588 tok |
| BrainWeb/payload-mcp-oauth npmjs.com OAuth 2.1 + PKCE + Dynamic Client Registration for Payload CMS MCP, so it connects to the | 8 | Claude Code | 2 | 864 tok |
| ABMJ/tenable-sc-mcp-server Production-ready MCP server for Tenable Security Center with intelligent caching. 90% toke | 8 | Codex, OpenCode | 1 | 1,269 tok |
| tb0hdan/wass-mcp Web Application Security Scanner MCP Server | 8 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 191 tok |
| snyk/saw-mcp | 8 | Claude Code, Codex, OpenCode | 2 | 1,968 tok |
| actual-software/actual-cli cli.actual.ai Architecture questions, answered from your ADRs. | 8 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,269 tok |
| P4ST4S/mcp-audit A transparent Go proxy that intercepts, signs, and audits all MCP tool calls between any c | 8 | Claude Code, Codex, OpenCode | 5 | 2,890 tok |
| abdullahkhawer/devops-skills A curated collection of DevOps Skills that enhance your development using AI to work smart | 8 | Claude Code | 1 | — |
| jgardner04/Ghost-MCP-Server An MCP Server for managing posts on Ghost CMS | 8 | Claude Code | 1 | 5,985 tok |
| chenyuxiaojin/cyxj-remotion-starter A workbench scaffold for directing Remotion to create videos with Claude Code: three-layer | 8 | Claude Code | 6 | 1,319 tok |
| sv-tools/scrypted-mcp-plugin Scrypted plugin that exposes a Streamable HTTP Model Context Protocol endpoint, with OAuth | 8 | Claude Code | 1 | 3,499 tok |
| kiruna-labs/picky-skills Ultra-thorough Claude Code skills for design, security, testing, and performance audits | 8 | Claude Code | 1 | 3,928 tok |
| draugr-dev/draugr draugr.dev Security scanning for CI from one file: SAST, SCA, secrets, IaC and containers, with every | 8 | Claude Code | 1 | 3,078 tok |
| trueoriginlabs/vibatchium pypi.org Stealth browser automation for AI agents — unattended, headless, N parallel persistent log | 8 | Codex, OpenCode | 1 | 15,899 tok |
| BashaarJavaid/MCP-Sentinel bashaarjavaid.github.io PortunusMCP Sentinel: build-time security scanning for MCP servers. | 8 | Codex, OpenCode | 1 | 2,929 tok |
| blackfoxxx/Mobix Authorized Android pentest lab, drivable by hand or by AI — Frida bypass chain, live traff | 8 | Claude Code | 1 | — |
| Quidli/connect-mcp connect.quid.li MCP server for agent identity & reputation: resolve social handles to wallet addresses, sc | 8 | Claude Code, Codex | 1 | — |
| purinzan/gx3-cli-mcp zenn.dev Trace a GX Works3 ladder without opening GX Works3 — read-only CLI + MCP server so anyone | 8 | Codex, OpenCode | 1 | 358 tok |
| organvm-iii-ergon/public-record-data-scrapper organvm-iii-ergon.github.io 50-state UCC public-records intelligence — fresh, enriched, scored MCA / financing leads v | 8 | GitHub Copilot | 2 | 2,005 tok |
| 0xHoneyJar/loa-freeside Platform layer of the Loa protocol | 8 | Claude Code, Codex, OpenCode | 11 | 5,343 tok |
| snapsynapse/skill-provenance skillprovenance.dev Version identity and integrity verification for Agent Skills. Tracks versions, detects sta | 7 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 2,382 tok |
| steve-magne/hookstack hookstack.app Claude Code hooks catalogue — production-ready hooks for Claude Code, OpenAI Codex & GitHu | 7 | Claude Code, Codex, OpenCode | 28 | 9,006 tok |
| taniwhaai/arai arai.taniwha.ai Your AI assistant reads CLAUDE.md and ignores it anyway. Ārai makes instruction files enfo | 7 | Claude Code, Codex, OpenCode | 11 | 5,060 tok |
| frootai/frootai frootai.dev From the Roots to the Fruits ! | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 9,604 tok |
| Diplomat-ai/diplomat-agent diplomat.run What can your AI agent do to the real world? Scan your code. See which tool calls have zer | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,004 tok |
| Zenobia000/ai-agentic-coding-template_unified | 7 | Claude Code | 9 | — |
| hugobatista/copilot-instructions-unicode-injection Proof of Concept (PoC) demonstrating prompt injection vulnerability in AI code assistants | 7 | GitHub Copilot | 1 | 1,064 tok |
| ca-risken/risken-mcp-server RISKEN's official MCP Server | 7 | Claude Code | 1 | 1,322 tok |
| ramboz/jig A Claude Code and Codex plugin that scaffolds AI-native development practices into new pro | 7 | Claude Code, Codex, OpenCode | 8 | 6,940 tok |