1,485 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,450Claude Code6,586Data and AI3,698Backend and APIs3,488Languages3,402Planning3,191Git and workflow3,129Code review2,728Memory and context2,353Testing2,330DevOps and cloud2,293Research2,288
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| YawLabs/npmjs-mcp npm registry MCP server — package intelligence, security audits, and dependency analysis f | 2 | Claude Code | 2 | — |
| bchoor/bws-mcp Remote MCP for Bitwarden Secrets Manager on Cloudflare Workers (list, get, put, delete) | 2 | Claude Code, Codex, OpenCode | 1 | 817 tok |
| bysonte/ssh-manager-mcp-server | 1 | Claude Code, Codex | 1 | 2,528 tok |
| oyusypenko/rob-mcp MCP server + x402-paid API for Robinhood Chain tokenized stocks — agent-callable premium/d | 1 | Claude Code, Codex, OpenCode | 12 | 6,813 tok |
| Johnny-Z13/proofslip proofslip.ai Ephemeral verification for agent workflows. 24-hour receipts your agents check before they | 1 | Claude Code, Codex | 4 | 1,608 tok |
| pezhik/skilltotal skilltotal.ai Scan AI components (MCP servers, agent skills, npm/PyPI packages) for malware & risky capa | 1 | Claude Code | 1 | 3,300 tok |
| dinglebear-ai/soma soma.dinglebear.ai Batteries-included RMCP runtime and scaffold for shipping Rust MCP servers with CLI/REST/H | 1 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 6,471 tok |
| Roop-World/LegalSearch Agent kit and MCP Registry metadata for Roop LegalSearch, a public Indian legal search MCP | 1 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 303 tok |
| nick-timms/drag-mcp-server | 1 | Claude Code | 1 | 1,133 tok |
| Sequentum/sequentum-mcp An AI interface to control Sequentum Cloud agents | 1 | Claude Code | 2 | — |
| 0xfreak0/sui-mcp npmjs.com Read-only MCP server for investigating activity on Sui — fund tracing, funding-source attr | 1 | Claude Code | 2 | 8,286 tok |
| GuillaumeLessard/qector-claude-plugin qector.store QECTOR Quantum Error Correction: High-performance, mathematically verified local QEC engin | 1 | Claude Code, Codex, OpenCode | 2 | 1,878 tok |
| Sanoy24/safe-fetch-mcp-server | 1 | Claude Code | 5 | 1,386 tok |
| aileron-sh/aileron Tamper-evident flight recorder for AI agents - hash-chained, signed audit log of every too | 1 | Claude Code | 1 | 1,055 tok |
| chrbailey/promptspeak-mcp-server promptspeak.admin-as-a-service.com Pre-execution governance for AI agents. Sub-millisecond tool call validation, drift detect | 1 | Claude Code | 1 | 1,253 tok |
| desper/quick-html-sharing qhs.fyi Indie SaaS for vibe coders to instantly share AI-generated HTML pages — unguessable URLs + | 1 | Claude Code, Codex, OpenCode | 2 | 3,608 tok |
| dockndevai/mcp-debezium dockndevai.github.io MCP server for Debezium / Kafka Connect — monitor & manage CDC connectors with security mo | 1 | Claude Code | 1 | — |
| dockndevai/mcp-keycloak dockndevai.github.io MCP server for Keycloak — multi-realm admin with security modes (read-only/read-write/admi | 1 | Claude Code | 1 | — |
| visus-mcp/visus-mcp Security-first MCP tool. Sanitizes web content before it reaches your LLM. | 1 | Claude Code | 1 | 715 tok |
| marras0914/cordon | 1 | Claude Code | 1 | 3,834 tok |
| nolindnaidoo/secrets-le letools.dev Find hardcoded credentials in a codebase, and never print one into the report | 1 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 6 | 8,168 tok |
| pedroknigge/arkgate npmjs.com If the AI writes an illegal import, the write is rejected. The same check fails the pull r | 1 | Claude Code, Codex, OpenCode | 4 | 7,869 tok |
| threadlinqs-cmd/Threadlinqs-Security-Detection-MCP Unified Detection Engineering Platform — 7,283+ detections across Sigma, Splunk ESCU, Elas | 1 | Claude Code, Cursor | 15 | — |
| srinivasan-sundaresan95/orihime smithery.ai Cross-repo code knowledge graph for Java/Kotlin/JS/TS — MCP server, taint analysis, call g | 1 | Claude Code, Codex, OpenCode | 3 | 1,402 tok |
| 100xPercent/pop-pay-python The runtime security layer for AI agent commerce | 1 | Claude Code | 1 | — |
| Quant-Off/skills Claude Code plugin marketplace for security auditing. evidence-based skills for constant-t | 1 | Claude Code | 1 | 1,385 tok |
| odere-pro/claude-oop-excellence odere-pro.github.io Claude Code plugin that enforces good object-oriented design in any language — audits for | 1 | Claude Code | 2 | 1,406 tok |
| ReviewToolkits/cpython-security-toolkit A Claude Code plugin for finding semantic security flaws in CPython's standard library — a | 1 | Claude Code | 1 | 893 tok |
| ne11nn/cantos-plugin The full Cantos system as a one-command Claude Code plugin: a self-improving, multi-agent | 1 | Claude Code | 1 | — |
| richer-richard/cc-research Multi-agent deep research on Claude models: a Claude Code plugin + Agent SDK CLI sharing o | 1 | Claude Code, Codex, OpenCode | 1 | 962 tok |
| clever-cc-plugins/cc-content A Claude Code plugin that provides a suite of content creation skills for marketing projec | 1 | Claude Code | 4 | 1,657 tok |
| dmitriyoproii-pixel/claude-code-secrets-guard PreToolUse hook for Claude Code that blocks commands from leaking secrets (tokens, keys, c | 1 | Claude Code | 1 | 552 tok |
| davidomil/cloudx Run and supervise Codex CLI from your phone on your own Linux build machine, with local-fi | 1 | Claude Code, Codex, OpenCode | 12 | 645 tok |
| kronael/ship The planner-worker-judge driver for Claude Code and Codex | 1 | Claude Code | 1 | 1,595 tok |
| yu-iskw/coding-agent-fabric The standard fabric for AI agent resources: Manage, sync, and update across Cursor, Claude | 1 | Claude Code | 4 | 1,353 tok |
| PBNZ/pbnz-skills A personal collection of Agent Skills for Claude Code, Claude Cowork, Claude.ai, the Claud | 1 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 2,921 tok |
| thedatakey/apollyon Evidence-first source security scanner for human-written and AI-generated code. Rust CLI w | 1 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 938 tok |
| Firmislabs/firmis-scanner firmislabs.com AI agent runtime security scanner - detect malicious behavior in Claude Skills, MCP Server | 1 | Claude Code, Codex, OpenCode | 2 | 3,779 tok |
| rumotion/ai-agent-project-template One canonical instruction file. Many models. ~1.9K-token startup. A copyable template for | 1 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 7 | 1,494 tok |
| ecodelearn/template-claude-code-ts npmjs.com Agent Harness — transactional npx installer that adapts one canonical template to Claude C | 1 | Claude Code, Codex, Gemini CLI, OpenCode | 6 | 1,578 tok |
| everest-an/AwesomeContext AwsomeContext — Give Claude Code the engineering knowledge of a senior team — architecture | 1 | Claude Code | 1 | — |
| Rojios/awesome-claude-code45k | 1 | Claude Code | 1 | — |
| msopariw/GitHubCopilotDemo Simple Todo app to demonstrate GitHub Copilot features: Custom Instructions, Skills, Custo | 1 | Claude Code, Codex, GitHub Copilot | 7 | 532 tok |
| zexion7873/copilot-setting Agentic context engineering for GitHub Copilot — agents route, skills execute, instruction | 1 | Claude Code, Codex, GitHub Copilot, OpenCode | 25 | 11,144 tok |
| JKasteele/ai-act-companion huggingface.co Local-first, explainable EU AI Act risk classifier with risk-assessment/DPIA/bias/AI-secur | 1 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 546 tok |
| marius-cetanas/macos-mail-mcp MCP server for Apple Mail (macOS Mail.app) — read, search, compose, and manage emails via | 1 | Claude Code | 4 | 4,971 tok |
| co-native-ab/graphdo-ts A TypeScript MCP server that gives AI agents scoped, low-risk access to Microsoft Graph. | 1 | Claude Code, Codex, OpenCode | 17 | 4,416 tok |
| hoyt-harness/ProcExecMCP Process execution MCP server. Archived — superseded by Claude Code's native Bash tool. | 1 | Claude Code | 1 | — |
| takeru/Kagami Claude Code Web exclusive Playwright MCP server. Enables browser automation via JWT authen | 1 | Claude Code | 3 | 549 tok |
| philiphess1/vibecheck-mcp AI-powered security audit MCP server with real-time vulnerability data | 1 | Claude Code | 1 | 262 tok |