2,139 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| slavins-co/cellartracker-mcp A local MCP server to connect AI tools to your wine cellar | 7 | Claude Code | 4 | 306 tok |
| WasmAgent/wasmagent-js wasmagent.github.io Embedded agent runtime compliance layer — WASM sandbox, MCP firewall, capability manifests | 7 | Claude Code, Codex, OpenCode | 2 | 3,963 tok |
| jmagar/swag-mcp SWAG reverse proxy configuration management via MCP. Create, edit, view, and manage nginx | 7 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 2,374 tok |
| TyrusRC/praetor Agentic pentest & red-team harness via Burp Suite MCP toolkit | 7 | Claude Code, Codex, Gemini CLI, OpenCode | 8 | 12,159 tok |
| MadGapun/PBP Local AI job application assistant for the German-speaking job market (DACH) — job search, | 7 | Claude Code, Codex, OpenCode | 5 | 11,634 tok |
| RenatoMignone/From-LLMs-to-Secure-Agents renatomignone.github.io A visual, source-grounded guide from agent architecture to secure agentic AI systems. | 7 | Codex, OpenCode | 1 | 503 tok |
| omkhar/vulnerability-validation-skill | 7 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 5 | 3,231 tok |
| ucalegon206/agency-agents local fork of msitarzewski/agency-agents | 7 | Codex, OpenCode | 1 | 694 tok |
| mozilla/blender mozilla.github.io | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 319 tok |
| brainbytes-dev/nextjs-expo-saas-starter Ship web + mobile SaaS in days. Next.js 16 · Expo SDK 55 · Stripe · RevenueCat · Better-Au | 7 | Claude Code | 1 | 2,183 tok |
| commitshow/production-audit legit.show Claude Code skill that audits a shipped repo for the production-readiness gaps ~70% of AI- | 7 | Claude Code | 1 | — |
| nimbus-agent/Nimbus nimbus-agent.dev On-call intelligence for DevOps and platform teams. Local-first AI agent over your tools — | 7 | Claude Code, Gemini CLI | 29 | 23,324 tok |
| jinyimeng01/net-code-audit-skill-master World-class .NET offensive security & code audit skill suite for AI agents | 7 | Codex, OpenCode | 1 | 1,280 tok |
| cdeust/ai-architect-mcp-codebase ai-architect.tools AI Architect Codebase: cross-platform code intelligence MCP for Claude Code, Codex, Gemini | 7 | Claude Code, Codex, OpenCode | 8 | 429 tok |
| Neetx/ai-security-research-radar AI Security Research Radar — AI for security and security for AI | 7 | Claude Code, Codex, OpenCode | 14 | 3,004 tok |
| netresearch/enterprise-readiness-skill Agent Skill for enterprise readiness assessment - security, quality, and automation | Clau | 7 | Codex, OpenCode | 1 | 941 tok |
| lidless-labs/wazuh-mcp lidless.dev Your SIEM answers live behind a console you babysit. wazuh-mcp reads Wazuh alerts, agents, | 7 | Codex, OpenCode | 1 | 1,149 tok |
| thehesiod/costco-mcp MCP server for Costco warehouse receipts and online orders (multi-account, Azure AD B2C au | 7 | Claude Code | 1 | 2,043 tok |
| s977043/river-review river-review.the3396.com Turn reviews into organizational decision assets. Review Judgment as Code for AI-assisted | 7 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 10 | 7,238 tok |
| HermeticOrmus/linux-sysadmin-skills A Claude Code skill bundle for Linux system administration — security, performance, diagno | 7 | Claude Code | 1 | 432 tok |
| compnew2006/browser-controller MCP server + Chrome extension that gives AI agents control of your real browser with exist | 7 | Codex, OpenCode | 1 | 679 tok |
| elfa-ai/mcp Elfa MCP Server | 7 | Claude Code, Codex, OpenCode | 2 | 359 tok |
| badchars/steganography-mcp npmjs.com 128-tool MCP server for steganography analysis — LSB detection, chi-square steganalysis, R | 7 | Claude Code | 1 | 422 tok |
| martinhavel/cz-agents-mcp cz-agents.dev Czech & EU due-diligence / KYC-AML MCP servers — sanctions (EU+OFAC), insolvency (ISIR), V | 6 | Claude Code | 6 | — |
| paolovella/vellaveto Agentic security control plane for MCP and AI agent tool calls. MCP-native policy gateway | 6 | Claude Code | 1 | 9,274 tok |
| ArmisSecurity/armis-appsec-mcp AI-powered security scanning MCP plugin for Claude Code | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 8,554 tok |
| suyogpawar88/Threat-Model suyogpawar88.github.io | 6 | Codex, OpenCode | 1 | 1,275 tok |
| abidjappie/nextjs-quick-starter A modern Next.js starter template with best practices built-in. Features Next.js 16, React | 6 | Cursor | 1 | 16,954 tok |
| mtnyilmaz/agents | 6 | Claude Code, Codex, OpenCode | 57 | 2,391 tok |
| morooka-akira/aicm | 6 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 10 | 9,770 tok |
| PoulpYBifle/NCF-Coding-Best-Practices | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 7,859 tok |
| Contoso-State/red-team-agent-orchestration | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 49 | 3,541 tok |
| nerviq/nerviq nerviq.net Your agent docs lie. Nerviq finds the lies in 30 seconds — stale references, permission ex | 6 | Claude Code, Codex, OpenCode | 15 | 2,959 tok |
| danielealbano/mcp-for-azure-devops-boards A Model Context Protocol (MCP) server for interacting with Azure DevOps Boards and Work It | 6 | Claude Code | 2 | — |
| mbeato/APIMesh apimesh.xyz APIMesh — 23 pay-per-call web analysis APIs + 16-tool MCP server with autonomous API gener | 6 | Claude Code | 1 | 723 tok |
| Firstmeridian/llm-sql-safety-executor-mcp A secure database access gateway for AI Agents: Empowering LLM (Agents) with database acce | 6 | Gemini CLI | 1 | 2,263 tok |
| DunkelCloud/ToolMesh toolmesh.io Self-hosted MCP gateway with authorization, credential injection, audit logging, and outpu | 6 | Claude Code | 1 | 1,408 tok |
| goklab/guardvibe guardvibe.dev Security infrastructure your AI can't be — deterministic, daily CVE intel past your model' | 6 | Claude Code | 1 | 597 tok |
| doc2mcp/doc2mcp doc2mcp.vercel.app Paste any docs URL — LangChain, Stripe, your own — and get a hosted MCP server Cursor can | 6 | Cursor | 1 | — |
| pitimon/claude-cybersecurity-skill Claude Code plugin — 18 cybersecurity domains: IR, DFIR, DevSecOps, SOC, Code Security, Co | 6 | Claude Code | 1 | 1,816 tok |
| jlevy/supply-chain-hardening Supply-chain payloads run at install, import, or repo-open time. Copy-pasteable hardening | 6 | Claude Code, Codex, OpenCode | 6 | 1,947 tok |
| 2389-research/fresh-eyes-review 2389-research.github.io Mandatory final sanity check before commits/PRs - catches security vulnerabilities, logic | 6 | Claude Code | 1 | 814 tok |
| ashp15205/scankii A local-first SAST & Runtime Security scanner built exclusively for LLM Agents. Detects cr | 6 | Cursor | 1 | 123 tok |
| NFTYoginis/agency-of-one nftyoginis.github.io A Claude Code template for running a content/design business as a solo operator. One orche | 6 | Claude Code | 4 | 1,973 tok |
| aarora79/claude-code-usage-analyzer Comprehensive cost & token usage analyzer for Claude Code with detailed breakdowns by mode | 6 | Claude Code | 3 | 2,771 tok |
| trongnguyenbinh/zalo-bot-mcp MCP channel server for the Zalo Bot API. Talk to your Claude Code session from Zalo, with | 6 | Claude Code | 8 | — |
| Sandeeprdy1729/timps timps-website.vercel.app The AI memory layer with 17 intelligence tools — catches contradictions, predicts burnout, | 6 | Claude Code, Codex, OpenCode | 2 | 24,995 tok |
| TheSethRose/Vulnerability-Scanning sethrose.dev Local-first vulnerability and supply-chain scanning for agent runtimes. | 6 | Codex, OpenCode | 1 | 978 tok |
| zebbern/pocmap zebbern.github.io MCP-native CVE, PoC & exploit discovery toolkit (Metasploit, Nuclei, GitHub & more) | 6 | Claude Code, Codex, OpenCode | 2 | 4,679 tok |
| jiezeng2004-design/PatchWarden patchwarden-showcase-redesign.yistart.chatgpt.site Turn your ChatGPT conversations into safe, auditable local execution. PatchWarden lets you | 6 | Codex, OpenCode | 1 | 539 tok |