1,583 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| pingidentity/aic-mcp-server | 2 | Claude Code, Codex, Gemini CLI, OpenCode | 8 | 572 tok |
| gnix45/Wazuh_MCP_SERVER Gateway to intergrate wazuh with AI using the model context protocol (query realtime alert | 2 | Claude Code | 1 | 322 tok |
| scottcrosby-securebine/kali-mcp-server Kali Linux penetration testing MCP server with 42 security tools, optimized for ARM64 and | 2 | Claude Code | 1 | 2,151 tok |
| peterkarman1/SkillInquisitor Scan for malicious agent skills | 2 | Claude Code, Codex, OpenCode | 2 | 867 tok |
| mbarlow12/claude-jail A ZSH plugin to keep Claude Code behind bars | 2 | Claude Code | 1 | 1,532 tok |
| maxwzg/claude-code-auto-approve A Claude Code Plugin that automatically approves Bash compound commands | 2 | Claude Code | 1 | 1,509 tok |
| PhenoML/phenoml-skills claude skills and plugin to use Phenoml! | 2 | Claude Code | 1 | — |
| pduggusa/judge-dredd-plugin dugganusa.com Operational discipline framework for Claude Code. Deployment gates, epistemic humility, Do | 2 | Claude Code, Codex, OpenCode | 2 | 1,113 tok |
| kodroi/block A Claude Code plugin to protect files from unwanted modifications. | 2 | Claude Code | 1 | 535 tok |
| dhks77/gw-ssh | 2 | Claude Code | 3 | 2,124 tok |
| AetherCore-Dev/token-rugcheck | 2 | Claude Code | 1 | 738 tok |
| psam-717/psamvault-mcp | 2 | Claude Code, Codex, OpenCode | 2 | 5,129 tok |
| AdamFerguson06/gmail-mcp Read-only Gmail investigation tool with MCP server support. Secure OAuth-based email acces | 2 | Claude Code | 1 | 821 tok |
| ahelme/mcp-claude-code-browser-tools An browser-tools mcp server for claude code | 2 | Claude Code | 39 | 3,612 tok |
| scott-pallas/firewalla-mcp | 2 | Claude Code | 1 | 1,232 tok |
| Cylera/cylera-mcp-server The official MCP Server from Cylera. Brings context about device inventory, threats, risks | 2 | Claude Code | 1 | 1,171 tok |
| Huleinpylo/kali-agents-mcp | 2 | Claude Code, Codex, OpenCode | 9 | 3,290 tok |
| xtofuub/frida-mcp-server MCP server for controlling jailbroken iOS devices via Frida | 2 | Claude Code | 12 | — |
| thomaschristory/catalyst-sdwan-super-mcp thomaschristory.github.io FastMCP server for Cisco Catalyst SD-WAN Manager (vManage), driven by the official OpenAPI | 2 | Claude Code, Codex, OpenCode | 2 | 7,183 tok |
| boecht/birre BiRRe (Bitsight Rating Retriever) MCP server provides access to BitSight security rating d | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 3,670 tok |
| aself101/mcp-secure-server A universal security-by-default framework for Model Context Protocol (MCP) servers that pr | 2 | Claude Code, Codex, OpenCode | 2 | 1,858 tok |
| 0xfreak0/sui-mcp npmjs.com Read-only MCP server for investigating activity on Sui — fund tracing, funding-source attr | 2 | Claude Code | 1 | — |
| orieg/gws-connector orieg.github.io Multi-account Google Workspace MCP server — Gmail, Calendar, and Drive with smart routing. | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 1,312 tok |
| linxule/durable-thinking Persistent Sequential Thinking MCP server on Cloudflare Workers + Durable Objects — though | 2 | Claude Code, Codex, OpenCode | 2 | 892 tok |
| marras0914/cordon | 2 | Claude Code | 1 | 3,834 tok |
| srinivasan-sundaresan95/orihime smithery.ai Cross-repo code knowledge graph for Java/Kotlin/JS/TS — MCP server, taint analysis, call g | 2 | Claude Code, Codex, OpenCode | 3 | 1,402 tok |
| WangChangxin0809/repo-agent-harness Lay the foundation that makes a repository teach coding agents how to work in it, then get | 2 | Claude Code | 6 | 975 tok |
| Firmislabs/firmis-scanner firmislabs.com AI agent runtime security scanner - detect malicious behavior in Claude Skills, MCP Server | 2 | Claude Code, Codex, OpenCode | 2 | 3,779 tok |
| JKasteele/ai-act-companion huggingface.co Local-first, explainable EU AI Act risk classifier with risk-assessment/DPIA/bias/AI-secur | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 546 tok |
| piyushptiwari1/mcpkernel pypi.org The Security Kernel for AI Agents — MCP/A2A gateway with policy enforcement, taint trackin | 2 | Claude Code, Codex, GitHub Copilot | 8 | 2,161 tok |
| rmednitzer/relay-shell rmednitzer.github.io Model Context Protocol server for full shell and SSH fleet operation, with audit, tiered a | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 3,254 tok |
| Raed2180416/holt raed2180416.github.io See what coding agents changed across Git worktrees. Inspect duplicates, collisions and de | 2 | Claude Code, Codex, OpenCode | 5 | 1,120 tok |
| rushikeshmore/tor-mcp Every web request your LLM tool makes leaks your IP. tor-mcp routes them through Tor with | 2 | Claude Code | 1 | 1,132 tok |
| Sathvik-1007/sift-kernel AI forensic reasoning kernel — MCP server bridging LLM agents and DFIR toolchains with evi | 2 | Claude Code | 1 | 1,633 tok |
| mgalbakri/claude-code-mastery agentcodeacademy.com Agent Code Academy — A free 12-week course from zero coding to AI coding mastery with Clau | 2 | Claude Code | 14 | 1,029 tok |
| SinoEdwards/mail-agent-mcp Local-first email MCP server for Gmail and QQ Mail with secure OAuth, IMAP search/read, at | 2 | Claude Code, Codex, OpenCode | 2 | 967 tok |
| ambient-code/gps ambient-code.ai GPS — read-only MCP caching tier for org and engineering data | 2 | Claude Code | 4 | — |
| flic/node-red-contrib-mcp-server Generic Model Context Protocol (MCP) server nodes for Node-RED: expose flows as MCP tools | 2 | Claude Code | 7 | — |
| cyanheads/osv-advisory-mcp-server npmjs.com Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full ad | 2 | Claude Code, Codex, OpenCode | 2 | 14,050 tok |
| cyanheads/attack-surface-mcp-server npmjs.com Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS | 2 | Claude Code, Codex, OpenCode | 2 | 16,676 tok |
| BigfootBytes/threatlocker-mcp-server | 2 | Claude Code | 2 | 7,124 tok |
| oaslananka/infra-lens-mcp Baseline-aware MCP tooling for Linux incident diagnosis over SSH: capture bounded live met | 2 | Claude Code, Codex, OpenCode | 4 | 482 tok |
| oaslananka/ssh-mcp-pro npmjs.com Secure MCP server for SSH automation with guarded remote commands, host allowlists, strict | 2 | Claude Code, Codex, OpenCode | 4 | 1,363 tok |
| waanvar/samong samong.dev Local-first, Obsidian-compatible knowledge base. Your notes stay on your machine — full-te | 2 | Claude Code | 2 | 695 tok |
| coltonbearden/carrel coltonbearden.github.io Read, index, pack and file your documents — from the terminal, for you and your agents. | 2 | Claude Code | 2 | 1,328 tok |
| nacre-work/nacre nacre.work Self-hosted permission-aware context layer for agents. MCP + API. | 2 | Claude Code | 7 | — |
| TheArchitectit/agent-guardrails-template Template repository with AI agent guardrails, safety protocols, and sprint task framework. | 1 | Claude Code, GitHub Copilot, Windsurf | 3 | 2,499 tok |
| yugef3h/leo-skills agent-skills,Expert code review skill: SOLID, security, performance, error handling, bound | 1 | Claude Code | 1 | — |
| rahmanef63/connectors One MCP server, several ways to register and ship it. A guide repo an AI agent reads befor | 1 | Claude Code, Codex, OpenCode | 2 | 2,602 tok |
| bysonte/ssh-manager-mcp-server | 1 | Claude Code | 1 | 2,528 tok |