2,137 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| justrach/codedb codegraff.com Zig code intelligence server and MCP toolset for AI agents. Fast tree, outline, symbol, se | 1,397 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,709 tok |
| apache/struts struts.apache.org Apache Struts is a free, open-source, MVC framework for creating elegant, modern Java web | 1,371 | Claude Code, Codex, OpenCode | 10 | 1,547 tok |
| affaan-m/agentshield cerebralvalley.ai AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, an | 1,329 | Claude Code, Codex | 2 | 936 tok |
| neurogen-dev/NeuroAPI neuroapi.host NeuroAPI: a Russian AI API for Codex CLI and Claude Code — secure one-click installers for | 1,317 | Codex, OpenCode | 1 | 509 tok |
| uphiago/recon-skills hiago.sh Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain t | 1,317 | Codex, OpenCode | 1 | 900 tok |
| mrwadams/attackgen AttackGen is a cybersecurity incident response testing tool that leverages the power of la | 1,255 | Claude Code, Codex, OpenCode | 2 | 5,851 tok |
| grafbase/grafbase the-guild.dev [Acquired by The Guild] The Grafbase GraphQL Federation Gateway | 1,228 | Claude Code | 2 | 4 tok |
| ysr666/dsh-vision-router Eyes for text-only DeepSeek Harness agents: built-in free vision chain (no key) + pixel-le | 1,181 | Claude Code, Codex, GitHub Copilot | 3 | 371 tok |
| TencentCloudBase/CloudBase-AI-Toolkit docs.cloudbase.net Backend for AI coding agents on CloudBase — database, auth, functions via Plugin, Skills & | 1,150 | Claude Code, Codex, OpenCode | 2 | 7,069 tok |
| mrwadams/stride-gpt stridegpt.streamlit.app An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat m | 1,144 | Codex, OpenCode | 1 | 4,428 tok |
| vndee/llm-sandbox vndee.github.io Lightweight and portable LLM sandbox runtime (code interpreter) Python library. | 1,137 | Claude Code, GitHub Copilot | 2 | 4,844 tok |
| prompt-security/clawsec prompt.security A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and va | 1,127 | Claude Code, Codex, OpenCode | 2 | 3,541 tok |
| safedep/vet safedep.io Protect against malicious open source packages 🤖 | 1,118 | Claude Code, Codex, OpenCode | 3 | 2,106 tok |
| google/sam sam-mesh.dev Agent Mesh | 1,111 | Codex, OpenCode | 1 | 1,694 tok |
| SylphxAI/pdf-reader-mcp sylphxai.github.io Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web | 1,042 | Codex, OpenCode | 19 | 650 tok |
| H-mmer/pentest-agents Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and | 1,039 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 63,845 tok |
| DataDog/pup datadoghq.com Give your AI agent a Pup — a CLI companion with 200+ commands across 33+ Datadog products. | 1,034 | Claude Code, Codex, OpenCode | 2 | 1,918 tok |
| SafeAI-Lab-X/ClawKeeper ClawKeeper: Comprehensive Safety Protection for OpenClaw Agents Through Skills, Plugins, a | 1,017 | GitHub Copilot | 1 | 574 tok |
| Pantheon-Security/medusa pantheonsecurity.io AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ | 1,009 | Claude Code | 1 | 2,806 tok |
| cloudflare/mcp mcp.cloudflare.com MCP server for the Cloudflare API | 1,009 | Claude Code, Codex, OpenCode | 2 | 9,710 tok |
| hashgraph-online/hol-guard hol.org Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, m | 1,000 | Codex, OpenCode | 1 | 516 tok |
| coder/httpjail HTTP(s) request filter for processes | 961 | Claude Code, Codex, OpenCode | 7 | 2,446 tok |
| trailofbits/claude-code-devcontainer Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security a | 958 | Claude Code | 1 | — |
| luckyPipewrench/pipelock pipelab.org Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, | 936 | Claude Code, Codex, OpenCode | 2 | 3,184 tok |
| Skyvern-AI/rustwright Playwright's API on a Rust CDP engine — Chromium browser automation for Python & Node, no | 935 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 996 tok |
| jdevalk/specification.website specification.website Website specification — HTML, accessibility, security, SEO, agent-readiness. Platform-agno | 912 | Claude Code | 1 | 8,413 tok |
| openbkn-ai/bkn-foundry openbkn.ai BKN Foundry is the Ontology back-end foundation of OpenBKN. It transforms ontology-driven | 910 | Codex, OpenCode | 1 | 1,010 tok |
| irsdl/webhacklist irsdl.github.io Archive of the Top 10 Web Hacking Techniques - every nominee since 2006, preserved | 907 | Claude Code, Codex | 15 | 2,327 tok |
| nuwax-ai/nuwax nuwax.com Nuwax Agent OS - An enterprise-grade AI Agent Development and Operation Platform - Providi | 897 | Claude Code, Codex, Cursor, OpenCode | 9 | 3,533 tok |
| pocketpaw/pocketpaw pocketpaw.xyz Your AI agent in 30 seconds. Not 30 hours. Self-hosted, open-source personal AI with deskt | 894 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 6,715 tok |
| arm/metis Metis is an open-source, AI-driven tool for deep security code review | 888 | Codex, OpenCode | 1 | 1,626 tok |
| s0ld13rr/pentestcode PentestCode - Multi-agent AI penetration testing system with persistent engagement state, | 886 | Claude Code, Codex, OpenCode | 2 | 11,646 tok |
| TalEliyahu/Awesome-AI-Security awesomeaisecurity.com Curated resources, research, and tools for securing AI systems | 883 | Codex, OpenCode | 1 | 759 tok |
| cyberkaida/reverse-engineering-assistant MCP server for reverse engineering tasks in Ghidra 👩💻 | 882 | Claude Code, Codex, GitHub Copilot, OpenCode | 7 | 4,872 tok |
| agentscope-ai/agentscope-runtime runtime.agentscope.io A production-ready runtime framework for agent apps with secure tool sandboxing, Agent-as- | 877 | GitHub Copilot | 1 | 646 tok |
| duriantaco/skylos skylos.dev Open source local-first PR scanner that finds dead code, security bugs, secrets, quality r | 852 | Claude Code, Codex, OpenCode | 4 | 1,664 tok |
| hoophq/hoop hoop.dev Open-source enforcement at runtime that masks sensitive data and blocks destructive comman | 837 | Claude Code | 11 | 8,033 tok |
| paradigmxyz/iron-proxy docs.iron.sh An egress firewall for untrusted workloads. | 829 | Codex, OpenCode | 1 | 1,429 tok |
| rennf93/fastapi-guard guard-core.com A security library for FastAPI that provides middleware to control IPs, log requests, dete | 825 | Claude Code, Codex, OpenCode | 2 | 6,279 tok |
| FrancescoStabile/numasec The AI Agent for Cyber Security. | 822 | Codex, OpenCode | 1 | 2,610 tok |
| ThinkWatchProject/ThinkWatch thinkwat.ch Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for | 819 | Claude Code | 1 | 1,011 tok |
| gemini-cli-extensions/security Google's Security extension for the Gemini CLI that finds vulnerabilities in your code cha | 793 | Gemini CLI | 1 | 3,993 tok |
| sgasser/pasteguard pasteguard.com AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI | 773 | Claude Code, Codex, OpenCode | 2 | 461 tok |
| faiscadev/fakecloud fakecloud.dev Free, open-source AWS emulator. LocalStack alternative: 107 services, 7,657 operations, tr | 773 | Codex, OpenCode | 1 | 3,973 tok |
| di-sukharev/vibe vibe.sukharev.dev Template for vibe coding web/mobile apps, websites and admin panels | 765 | Claude Code, Codex, OpenCode | 3 | 1,474 tok |
| msrbuilds/elementor-mcp emcptools.com WordPress MCP server with 234 Free tools and 547 total with Pro for building pages, managi | 757 | Claude Code | 1 | 52 tok |
| hadriansecurity/OpenHack Lightweight, file-based workspace for source-guided whitebox security review. | 747 | Codex, OpenCode | 1 | 2,001 tok |
| ZeroLeaks/zeroleaks zeroleaks.ai AI Security Scanner - Test your AI systems for prompt injection and extraction vulnerabili | 741 | Codex, OpenCode | 1 | 2,972 tok |
| solokeys/solo2 solo2.dev Solo 2 firmware in Rust | 731 | Codex, OpenCode | 1 | 1,317 tok |
| Kymo-MCP/mcpcan mcpcan.com MCPCAN is a centralized management platform for MCP services. It deploys each MCP service | 728 | Cursor | 1 | 239 tok |