1,998 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,489Claude Code6,592Data and AI3,693Backend and APIs3,493Languages3,401Planning3,203Git and workflow3,138Code review2,732Memory and context2,360Testing2,339DevOps and cloud2,295Research2,291
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| abhishekrai43/VulScan-MCP marketplace.visualstudio.com Security vulnerability scanner for VS Code. Scans dependencies for CVEs from NVD/OSV datab | 3 | GitHub Copilot | 1 | 833 tok |
| balasriharsha/shieldbot Shieldbot is an AI-powered security scanner that runs directly inside Claude Code. It comb | 3 | Claude Code | 1 | — |
| stefanoverna/basecamp-mcp MCP server for Basecamp 3 with OAuth, TypeScript, and 47 tools for projects, messages, tod | 3 | Codex, OpenCode | 1 | 5,538 tok |
| an0malous/mcp-custos npmjs.com Secure-coding guardian for AI agents — official CWE/NIST/ASVS guidance in-context, enforce | 3 | Claude Code | 1 | 748 tok |
| sixees/mcp-curl Simple MCP server to execute cURL commands - ideal for Desktop AI Clients (Claude / ChatGP | 3 | Claude Code, GitHub Copilot | 2 | 1,681 tok |
| simonrueba/tripwire Context injection for AI agents, triggered by the codebase itself | 3 | Claude Code | 2 | — |
| Chorozion/Sophia-Stack Self contained mCP web development platform | 3 | Claude Code | 10 | 1,120 tok |
| Suzu-Testing/metasploit-cursor-harness Agentic penetration testing harness bridging Cursor AI agents with Metasploit Framework vi | 3 | Claude Code, Codex, Cursor, OpenCode | 63 | 2,469 tok |
| jmcentire/signet-eval Claude Code policy enforcement hook — deterministic authorization for AI agent tool calls | 3 | Claude Code | 1 | 1,659 tok |
| Nosmoht/talos-mcp-server MCP server for Talos Linux cluster management via the native gRPC API | 3 | Claude Code, Codex, OpenCode | 18 | 9,678 tok |
| nifrajs/nifra nifra.dev Full-stack TypeScript framework built for AI agents: typed server and client with no codeg | 3 | Claude Code, Codex, OpenCode | 2 | 2,352 tok |
| sukoji/loadout npmjs.com 🎯 Loadout — profile your project and gear up Claude Code with the right skills, MCP serve | 3 | Claude Code, Codex, OpenCode | 6 | 791 tok |
| arcjet/skills Skills to make your AI coding agent an Arcjet security expert. | 3 | Codex, OpenCode | 1 | 688 tok |
| Shad0wMazt3r/The-Scaffolding Solve CTF challenges, find bugs, better accuracy. Plug and play with any agent. | 3 | Claude Code, Codex, OpenCode | 2 | 1,137 tok |
| s977043/river-review river-review.the3396.com Turn reviews into organizational decision assets. Review Judgment as Code for AI-assisted | 3 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 10 | 9,528 tok |
| revenantworks/claude-skills Revenantworks Agent Skills for Claude — the foundation wrights, the gamedev smiths, and th | 3 | Claude Code | 4 | 986 tok |
| m0rvayne/mcp-redteam Active red-teaming for MCP servers. Source analysis + live exploitation + auto-fix. Claude | 3 | Claude Code | 1 | 8,266 tok |
| Mearman/agent-permissions Cross-agent permission policy for AI coding agents. MCP sync daemon, CLI, codecs, and eval | 3 | Claude Code, Codex, OpenCode | 2 | 4 tok |
| brandonkramer/trelly Trello CLI + MCP server with multi-profile auth. JSON output for scripts and AI agents. | 3 | Codex, OpenCode | 1 | 1,084 tok |
| ASK191225/bugbounty-kit Production bug bounty operations kit — LLM brain, token scanner, HackerOne MCP, RAG pipeli | 3 | Claude Code | 2 | 5,395 tok |
| SlyBase/wordpress-slytranslate AI driven translation using native WordPress 7 AI connectors and provide AI abilities | 3 | GitHub Copilot | 7 | 18,512 tok |
| oumaimah-QA/QIOS Structured QA skill framework for AI agents enabling consistent, risk-aware, and execution | 3 | Codex, OpenCode | 1 | 488 tok |
| alphacrack/iac-scanner An agentic AI–powered IaC scanner that evaluates cloud infrastructure against security and | 3 | Claude Code | 1 | 1,699 tok |
| snyk-labs/snyk-vulnbench | 3 | Claude Code, Codex, OpenCode | 12 | 2,521 tok |
| brovar/10x-pentest 10x pentest workflow build on agentic skills | 3 | Claude Code, Codex | 20 | — |
| HermeticOrmus/linux-sysadmin-skills A Claude Code skill bundle for Linux system administration — security, performance, diagno | 3 | Claude Code | 1 | 432 tok |
| Enovatr-Labs/SpecRoute Open source framework for spec-driven agentic software engineering. PRDs, prompts, agents, | 3 | Claude Code, Codex, Gemini CLI, OpenCode | 7 | 3,090 tok |
| badchars/steganography-mcp npmjs.com 128-tool MCP server for steganography analysis — LSB detection, chi-square steganalysis, R | 3 | Claude Code | 1 | 422 tok |
| gemini-cli-extensions/google-secops Gemini CLI Extension for Google SecOps OneMCP. | 2 | Gemini CLI | 1 | 1,356 tok |
| wallidsaydi-creator/HOM-AIMOS hom.autos Agent-security system built on cryptographically auditable persistent memory, native retri | 2 | Codex, OpenCode | 1 | 231 tok |
| Agnuxo1/enigmagent-mcp npmjs.com Local encrypted vault MCP server. AES-256-GCM + Argon2id. Resolves {{PLACEHOLDER}} secrets | 2 | Codex, OpenCode | 1 | 481 tok |
| paichart/paichart AI-native service orchestration platform. Discover MCP services by capability, chain multi | 2 | Claude Code | 46 | 8,874 tok |
| KevinRabun/GDPRShiftLeftMCP GDPR Shift-Left Compliance MCP Server — Azure-focused GDPR compliance automation. | 2 | GitHub Copilot | 2 | 2,030 tok |
| Skyrxin/sast-mcp-server | 2 | Claude Code, Gemini CLI | 2 | 3,768 tok |
| barateza/mcp-plesk-dev-docs A unified MCP server that indexes and retrieves Plesk documentation using vector embedding | 2 | Claude Code, Codex, GitHub Copilot | 7 | 2,967 tok |
| calllint/calllint calllint.com Pre-flight risk linting for MCP and agent tools — check the blast radius before your agent | 2 | Codex, GitHub Copilot, OpenCode | 2 | 1,203 tok |
| matematicsolutions/mcp-saos matematicsolutions.com MCP server for Polish common and Supreme Court case law via the SAOS API - verifiable cita | 2 | Claude Code, Codex, OpenCode | 3 | 1,183 tok |
| psyb0t/docker-pibox ciprian.51k.eu pi-coding-agent inside an aicodebox container. One image, five ways in: interactive shell, | 2 | Claude Code | 1 | — |
| thehesiod/costco-mcp MCP server for Costco warehouse receipts and online orders (multi-account, Azure AD B2C au | 2 | Claude Code | 1 | 2,043 tok |
| AUTHENSOR/AUTHENSOR authensor.com We audit the instruments the AI industry measures itself with — and file every fix upstrea | 2 | Claude Code, Codex, Cursor, OpenCode | 3 | 2,309 tok |
| Pantrist-dev/pantrist-mcp Model Context Protocol server wrapping the Pantrist REST API | 2 | Claude Code | 1 | — |
| LeonMelamud/claude-code-security-review AI-powered security audit skill for code changes with false positive filtering. Based on A | 2 | Codex, OpenCode | 1 | 530 tok |
| KalinYorgov/AI-agent-security-MCP A Model Context Protocol (MCP) server that provides security functionality for AI agents, | 2 | Claude Code | 1 | 593 tok |
| Whitening-Sinabro/clouvel No coding without a PRD. An MCP server that enforces the vibe-coding process, with fixed g | 2 | Claude Code | 4 | 3,103 tok |
| daedahl/claude-code-principles Working principles for configuring Claude Code, from hands-on practice | 2 | Claude Code | 3 | 102 tok |
| sumleo/AgentSkillsScanner | 2 | Claude Code | 1 | 1,773 tok |
| MokeyBytes/claude-baseline Reusable Claude Code baseline with safety hooks, audit logging, automatic formatting, cost | 2 | Claude Code | 19 | 975 tok |
| stranma/claude-code-python-template Production-ready Python project template for Claude Code with TDD workflow, 7 custom agent | 2 | Claude Code | 4 | 616 tok |
| raccioly/websec-validator pypi.org Local-first security recon that briefs your AI coding agent: facts + tailored probes, code | 2 | Codex, OpenCode | 1 | 1,080 tok |
| WZ/agent-gate Single-user audit gate for AI agents that talk HTTP — local proxy + dashboard, no backend, | 2 | Claude Code | 1 | 4,691 tok |