2,139 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| punt-labs/beadle Claude Code via e-mail based on an addressbook with UNIX style rwx permissions per interac | 3 | Claude Code, Codex, OpenCode | 4 | 2,736 tok |
| ashlrai/ashlr-plugin plugin.ashlr.ai Token-efficiency plugin for Claude Code and Codex: MCP tools and hooks that replace high-v | 3 | Codex, OpenCode | 1 | 274 tok |
| Luxvil/ai-coding-rules luxvil.github.io 🤖 Enhance AI coding assistants with battle-tested rules for reliability, predictability, | 3 | Claude Code | 1 | 1,894 tok |
| HendrikReh/llm-guard AI Coding Hackathon Project - Experimenting with AI-assisted development workflows | 3 | Codex, OpenCode | 1 | 3,941 tok |
| juwonllee2024-dotcom/rulesync The ESLint & Babel for AI Agent Rules — Compile, lint, optimize, and sync instructions acr | 3 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 882 tok |
| Baba01hacker666/gemini-redteam Red team gemini skills and plugins | 3 | Gemini CLI | 1 | 1,071 tok |
| kent-tokyo/shohei Rust MCP server with 168 security tools for Claude — DNS/DNSSEC, TLS, email security, OSIN | 3 | Codex, OpenCode | 1 | 2,537 tok |
| gw0/docker-claude-code Dockerized Claude Code Sandbox | 3 | Claude Code | 1 | 1,117 tok |
| combinatrix-ai/agenv nvm / pyenv for AI coding agents | 3 | Claude Code | 5 | 290 tok |
| ggoodman/mcp-server-go Golang implementation of the streaming MCP HTTP transport with sessions, auth and horizont | 3 | Codex, OpenCode | 1 | 701 tok |
| onesimplecode/agent-engineering-standards This repo hands your AI coding agent a rulebook and your CI the checks that enforce it, ca | 3 | Codex, OpenCode | 1 | 7,802 tok |
| hidetsugu-miya/claude-plugins | 3 | Claude Code, Codex, OpenCode | 6 | 1,318 tok |
| SecondLifes/delphi-expert An opinionated ecosystem of rules, skills and steerings to elevate Delphi development to s | 3 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 11,182 tok |
| hyperpolymath/boj-server hyperpolymath.github.io One MCP stdio endpoint for a whole toolchain — GitHub, GitLab, cloud, mail, browser and re | 3 | GitHub Copilot | 1 | 510 tok |
| abhishekrai43/VulScan-MCP marketplace.visualstudio.com Security vulnerability scanner for VS Code. Scans dependencies for CVEs from NVD/OSV datab | 3 | GitHub Copilot | 1 | 833 tok |
| shino369/claude-code-personal-workspace personal claude code workspace for daily task | 3 | Claude Code | 14 | 1,169 tok |
| balasriharsha/shieldbot Shieldbot is an AI-powered security scanner that runs directly inside Claude Code. It comb | 3 | Claude Code | 1 | — |
| an0malous/mcp-custos npmjs.com Secure-coding guardian for AI agents — official CWE/NIST/ASVS guidance in-context, enforce | 3 | Claude Code | 1 | 748 tok |
| simonrueba/tripwire Context injection for AI agents, triggered by the codebase itself | 3 | Claude Code | 2 | — |
| Chorozion/Sophia-Stack Self contained mCP web development platform | 3 | Claude Code | 10 | 1,120 tok |
| Suzu-Testing/metasploit-cursor-harness Agentic penetration testing harness bridging Cursor AI agents with Metasploit Framework vi | 3 | Claude Code, Codex, Cursor, OpenCode | 63 | 2,469 tok |
| jmcentire/signet-eval Claude Code policy enforcement hook — deterministic authorization for AI agent tool calls | 3 | Claude Code | 1 | 1,659 tok |
| calllint/calllint calllint.com Pre-flight risk linting for MCP and agent tools — check the blast radius before your agent | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,203 tok |
| psyb0t/docker-pibox ciprian.51k.eu pi-coding-agent in a Docker image built on aicodebox, with an HTTP API, an OpenAI-compatib | 3 | Claude Code | 1 | — |
| drsh4dow/bevy-agent-feedback-plugin Let AI coding agents (Claude, Codex, Pi) see and control your Bevy game - remote input inj | 3 | Codex, OpenCode | 1 | 177 tok |
| hackingyseguridad/IA hackingyseguridad.com IA aplicada a la detección de vulnerabilidades y hacking (Offensive AI) | 3 | Claude Code | 14 | 1,751 tok |
| Mikacr1138/claude-bug-bounty Enable efficient bug bounty hunting across Web2 and Web3 with a tool that supports full re | 3 | Claude Code | 1 | 761 tok |
| Shad0wMazt3r/The-Scaffolding Solve CTF challenges, find bugs, better accuracy. Plug and play with any agent. | 3 | Claude Code, Codex, OpenCode | 2 | 1,137 tok |
| me-cedric/agent-compass Central agentic standards, guidelines, skills & bootstrap tooling for AI coding agents (Cl | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 1,283 tok |
| willow-memory/willow-mcp Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task | 3 | Claude Code | 4 | — |
| Mearman/agent-permissions npmjs.com Cross-agent permission policy for AI coding agents. MCP sync daemon, CLI, codecs, and eval | 3 | Claude Code, Codex, OpenCode | 2 | 4 tok |
| babywyrm/mcpnuke MCP red teaming & security scanner — enumerate, probe, and exploit Model Context Protocol | 3 | Codex, Cursor, OpenCode | 6 | 1,684 tok |
| brandonkramer/trelly Trello CLI + MCP server with multi-profile auth. JSON output for scripts and AI agents. | 3 | Codex, OpenCode | 1 | 1,084 tok |
| RichardGeorgeDavis/Codex-Workspace A local-first multi-repo workspace system with shared runtime control, memory, docs, and a | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 1,610 tok |
| Synapsor/Synapsor-Runner synapsor.ai Let AI agents query and update Postgres/MySQL without raw SQL, unrestricted schema access, | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,188 tok |
| icohangar-ops/software-factory SuperPlane Software Factory — hackathon (clone of superplane-software-factory) | 3 | Claude Code, Codex, OpenCode | 3 | 451 tok |
| oumaimah-QA/QIOS Structured QA skill framework for AI agents enabling consistent, risk-aware, and execution | 3 | Codex, OpenCode | 1 | 488 tok |
| viplavfauzdar/aisecops-interceptor aisecops.net AISecOps Interceptor — Runtime security layer for AI agents | 3 | Claude Code, Codex, OpenCode | 2 | 2,389 tok |
| BostonOrange/claude-code-framework Production-ready AI development workflow system for Claude Code — skills, CI/CD workflows, | 3 | Claude Code, Codex, OpenCode | 30 | 7,754 tok |
| alphacrack/iac-scanner An agentic AI–powered IaC scanner that evaluates cloud infrastructure against security and | 3 | Claude Code | 1 | 1,699 tok |
| dradoaica/cogov-a-sdlc Co-Governed Agentic SDLC (Software Development Life Cycle) | 3 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 10 | 252 tok |
| vectra-ai-research/vectra-soc-agent-starter Starter pack for building an AI SOC analyst on top of Vectra AI — AGENTS.md + agent skills | 3 | Codex, OpenCode | 1 | 1,779 tok |
| Aviator-Coding/home-ops | 3 | Claude Code, Codex, OpenCode | 28 | 4,343 tok |
| serenashenn3-art/wechat-forensic-pro wechat-forensic-pro | 3 | Claude Code, Codex, Cursor, Gemini CLI, OpenCode | 4 | 13,264 tok |
| mngerasimenko/keepware-llm-lab keepware's engineering work on LLM agents: agent memory stored in markdown files instead o | 3 | Claude Code | 1 | 525 tok |
| mrzroot/agentforge mrzroot.github.io ⚡ The Universal AI Coding Agent Toolkit & OS. Sync rules across Cursor, Claude Code, Winds | 3 | Claude Code, GitHub Copilot, Cursor, Windsurf | 4 | 1,012 tok |
| brovar/10x-pentest 10x pentest workflow build on agentic skills | 3 | Claude Code, Codex | 20 | — |
| stephaneberle9/authsome-mcp-proxy A Model Context Protocol (MCP) proxy that adds an OAuth/OIDC frontend to upstream MCPs tha | 3 | Claude Code | 1 | 502 tok |
| wallieinformal201/pentest-mcp-server Integrate penetration testing tools and payloads into your workflow through the Model Cont | 3 | Claude Code, Codex, OpenCode | 2 | 9,962 tok |
| Eszetael/postgres-mcp-hardened Secure read-only PostgreSQL MCP server in Rust — a hardened alternative to the deprecated | 3 | Claude Code | 1 | — |