1,581 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| hoophq/hoop hoop.dev Open-source enforcement at runtime that masks sensitive data and blocks destructive comman | 837 | Claude Code | 11 | 8,033 tok |
| rennf93/fastapi-guard guard-core.com A security library for FastAPI that provides middleware to control IPs, log requests, dete | 825 | Claude Code, Codex, OpenCode | 2 | 6,279 tok |
| ThinkWatchProject/ThinkWatch thinkwat.ch Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for | 819 | Claude Code | 1 | 1,011 tok |
| sgasser/pasteguard pasteguard.com AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI | 773 | Claude Code, Codex, OpenCode | 2 | 461 tok |
| di-sukharev/vibe vibe.sukharev.dev Template for vibe coding web/mobile apps, websites and admin panels | 765 | Claude Code, Codex, OpenCode | 3 | 1,474 tok |
| msrbuilds/elementor-mcp emcptools.com WordPress MCP server with 234 Free tools and 547 total with Pro for building pages, managi | 757 | Claude Code | 1 | 52 tok |
| arklexai/Agent-First-Organization arklex.ai The official Python library for Arklex framework | 699 | Claude Code | 8 | 633 tok |
| vz-risk/VCDB VERIS Community Database | 674 | Claude Code | 2 | 1,089 tok |
| samvallad33/vestige Think before doing, prove before saving. Vestige is a local, deterministic safety kernel | 656 | Claude Code, Codex, OpenCode | 2 | 2,351 tok |
| apache/casbin-gateway gateway.casbin.org See what every AI coding agent on your machine is doing, and whether the API behind it is | 643 | Claude Code | 1 | 134 tok |
| nirholas/XActions xactions.app ⚡ The Complete X/Twitter Automation Toolkit — Scrapers, MCP server for AI agents (Claude/G | 624 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 11 | 8,538 tok |
| provos/ironcurtain ironcurtain.dev A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*htt | 615 | Claude Code, GitHub Copilot, Gemini CLI | 10 | 9,002 tok |
| emersonfelipesp/netbox-proxbox emersonfelipesp.com Netbox Plugin for integration between Proxmox and Netbox | 606 | Claude Code, Codex, OpenCode | 2 | 14,169 tok |
| chainloop-dev/chainloop docs.chainloop.dev Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Sig | 606 | Claude Code | 14 | 3,767 tok |
| emiliaprotocol/emilia-protocol emiliaprotocol.ai Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned ma | 599 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 1,869 tok |
| transilienceai/communitytools transilience.ai Open-source Claude Code skills, agents, and slash commands for AI-powered penetration test | 595 | Claude Code | 2 | 1,060 tok |
| thunder-id/thunderid thunderid.dev ThunderID, an LF Decentralized Trust project, is a high-performance, open-source identity | 594 | Claude Code, Codex, GitHub Copilot, OpenCode | 14 | 1,678 tok |
| yhy0/CHYing-agent zc.tencent.com Tencent Cloud Hackathon - Intelligent Penetration Testing Challenge, First Edition Top 9 | 590 | Claude Code | 1 | — |
| KeyValueSoftwareSystems/agent-opfor Open-source adversary emulation for AI agents and MCP servers. | 584 | Claude Code, Codex, OpenCode | 2 | 8,568 tok |
| ksenxx/kiss_ai KISS Sorcar: Keep it Simple, Stupid AI General Purpose Agent Framework for Long Horizon Ta | 564 | Claude Code | 1 | 311 tok |
| OWASP/AISVS The AI Security Verification Standard (AISVS) focuses on providing developers, architects, | 564 | Claude Code, Codex, OpenCode | 2 | 752 tok |
| Prohao42/aimy-skill aimy-skill is a lightweight, embeddable penetration testing assistant skill for AI Agents, | 522 | Claude Code | 1 | 770 tok |
| Masriyan/Claude-Code-CyberSecurity-Skill security-life.org 22 production-quality Claude Code Skills for cybersecurity professionals , covering offens | 518 | Claude Code | 1 | 1,169 tok |
| MHaggis/Security-Detections-MCP detect.michaelhaag.org MCP to help Defenders Detection Engineer Harder and Smarter | 503 | Claude Code, Cursor | 30 | — |
| epam/ai-dial-chat chat.dialx.ai A default UI for AI DIAL | 502 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 52 | 4,850 tok |
| dogwood-policy/dogwood dogwood-policy.github.io Reference parser and interpreter for the Dogwood policy language | 499 | Claude Code, Codex, OpenCode | 6 | 854 tok |
| disler/claude-code-damage-control | 480 | Claude Code | 5 | 17 tok |
| GoPlusSecurity/agentguard Security guard for AI agents — blocks malicious skills, prevents data leaks, protects secr | 480 | Claude Code | 1 | 340 tok |
| badchars/darknet-mcp-server npmjs.com 66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onio | 478 | Claude Code | 1 | 336 tok |
| zhuyansen/agent-skills-hub agentskillshub.top Discover and compare open-source Agent Skills, tools & MCP servers — with quality scoring, | 474 | Claude Code | 6 | 2,564 tok |
| professorpalmer/Puppetmaster Provider-neutral control plane for durable-state agent swarms: subprocess workers, leases, | 471 | Claude Code, Codex, Cursor, OpenCode | 2 | 4,706 tok |
| ParetoSecurity/pareto-mac paretosecurity.com Automatically audit your Mac for basic security hygiene. | 459 | Claude Code, Codex, OpenCode | 2 | 2,744 tok |
| SponsioLabs/Sponsio sponsio.dev Deterministic safety solutions for probabilistic AI agents | 455 | Claude Code | 1 | 2,228 tok |
| adithyan-ak/AgentHound agenthound.io Offensive security framework for AI agent infrastructure - recon, credential looting, mode | 453 | Claude Code | 2 | 1,136 tok |
| FlareStarter/flarestarter flarestarter.com A full-stack, edge-native SaaS starter built with TanStack Start + Cloudflare Workers | 451 | Claude Code, Codex, OpenCode | 2 | 772 tok |
| leonvanzyl/agentic-coding-starter-kit | 449 | Claude Code, Codex, OpenCode | 27 | 351 tok |
| PrismorSec/prismor prismor.dev Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue t | 448 | Claude Code, Codex, OpenCode | 10 | 5,259 tok |
| db-lyon/ue-mcp ue-mcp.com Complete Unreal Engine development toolkit exposed as MCP tools. | 448 | Claude Code | 3 | 7,277 tok |
| smithersai/smithers smithers.sh Smithers is an agentic workflow framework for defining workflows in simple TypeScript conf | 440 | Claude Code, Codex, OpenCode | 9 | 5,207 tok |
| leancoderkavy/premiere-pro-mcp premiere-pro-mcp.com Adobe Premiere Pro MCP — independent, local-first server for supported workflows. Connect | 440 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 9 | 4,050 tok |
| suzuki-shunsuke/ghtkn A CLI to create short-lived (8 hours) GitHub App User Access Token for secure local develo | 436 | Claude Code, Codex, OpenCode | 2 | 19 tok |
| miniidealab/openlogos Open-source software development methodology for the AI era | Open-source software develop | 428 | Claude Code, Codex, OpenCode | 8 | 5,891 tok |
| ai-sdlc-framework/ai-sdlc ai-sdlc.io Declarative governance framework for AI-augmented software development lifecycles | 423 | Claude Code | 7 | 3,078 tok |
| canyonroad/agentsh agentsh.org Execution-Layer Security (ELS) for AI agents — policy-enforced shell with audit. | 404 | Claude Code, Codex, OpenCode | 2 | 596 tok |
| Nebulock-Inc/agentic-threat-hunting-framework ATHF is a framework for agentic threat hunting - building systems that can remember, learn | 402 | Claude Code, Codex, OpenCode | 3 | 9,623 tok |
| hypnguyen1209/offensive-claude Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR | 402 | Claude Code | 1 | 4,209 tok |
| smart-mcp-proxy/mcpproxy-go mcpproxy.app Supercharge AI Agents, Safely | 399 | Claude Code, Codex, OpenCode | 2 | 6,639 tok |
| potatoqualitee/kbupdate 🛡 KB Viewer, Saver, Installer and Uninstaller | 393 | Claude Code, Codex, GitHub Copilot, OpenCode | 10 | 1,046 tok |
| pegasi-ai/reins reins.sh Stop AI agents from doing things you didn't ask for. | 392 | Claude Code | 3 | — |
| cellebrite-labs/ghidra-rpc A Ghidra agentic reverse engineering skill. | 390 | Claude Code, Codex, OpenCode | 2 | 5,071 tok |