1,170 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| paradigmxyz/iron-proxy docs.iron.sh An egress firewall for untrusted workloads. | 829 | Codex, OpenCode | 1 | 1,429 tok |
| rennf93/fastapi-guard guard-core.com A security library for FastAPI that provides middleware to control IPs, log requests, dete | 825 | Claude Code, Codex, OpenCode | 2 | 6,279 tok |
| FrancescoStabile/numasec The AI Agent for Cyber Security. | 822 | Codex, OpenCode | 1 | 2,610 tok |
| sgasser/pasteguard pasteguard.com AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI | 773 | Claude Code, Codex, OpenCode | 2 | 461 tok |
| faiscadev/fakecloud fakecloud.dev Free, open-source AWS emulator. LocalStack alternative: 107 services, 7,657 operations, tr | 773 | Codex, OpenCode | 1 | 3,973 tok |
| di-sukharev/vibe vibe.sukharev.dev Template for vibe coding web/mobile apps, websites and admin panels | 765 | Claude Code, Codex, OpenCode | 3 | 1,474 tok |
| hadriansecurity/OpenHack Lightweight, file-based workspace for source-guided whitebox security review. | 747 | Codex, OpenCode | 1 | 2,001 tok |
| ZeroLeaks/zeroleaks zeroleaks.ai AI Security Scanner - Test your AI systems for prompt injection and extraction vulnerabili | 741 | Codex, OpenCode | 1 | 2,972 tok |
| solokeys/solo2 solo2.dev Solo 2 firmware in Rust | 731 | Codex, OpenCode | 1 | 1,317 tok |
| pdovhomilja/nextcrm-app demo.nextcrm.io NextCRM — Open-source CRM built with Next.js 16, React 19, PostgreSQL, Prisma 7, and shadc | 727 | Codex, OpenCode | 1 | 1,328 tok |
| arcjet/arcjet-js arcjet.com Runtime security for AI apps and agents: prompt injection detection, tool-call authorizati | 694 | Codex, OpenCode | 1 | 752 tok |
| SonarSource/sonarqube-mcp-server sonarsource.com Official SonarQube MCP Server for code quality and security in AI agents | 674 | Codex, OpenCode | 1 | 2,487 tok |
| Zyrexnn/Cybermes Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes | 668 | Codex, Cursor, OpenCode | 2 | 2,021 tok |
| samvallad33/vestige Think before doing, prove before saving. Vestige is a local, deterministic safety kernel | 656 | Claude Code, Codex, OpenCode | 2 | 2,351 tok |
| nirholas/XActions xactions.app ⚡ The Complete X/Twitter Automation Toolkit — Scrapers, MCP server for AI agents (Claude/G | 624 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 11 | 8,538 tok |
| emersonfelipesp/netbox-proxbox emersonfelipesp.com Netbox Plugin for integration between Proxmox and Netbox | 606 | Claude Code, Codex, OpenCode | 2 | 14,169 tok |
| alibaba/anolisa agentic-os.sh ANOLISA (Agentic Nexus Operating Layer & Interface System Architecture) | Agentic OS with | 603 | Codex, OpenCode | 1 | 5,082 tok |
| emiliaprotocol/emilia-protocol emiliaprotocol.ai Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned ma | 599 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 1,869 tok |
| thunder-id/thunderid thunderid.dev ThunderID, an LF Decentralized Trust project, is a high-performance, open-source identity | 594 | Claude Code, Codex, GitHub Copilot, OpenCode | 14 | 1,678 tok |
| KeyValueSoftwareSystems/agent-opfor Open-source adversary emulation for AI agents and MCP servers. | 584 | Claude Code, Codex, OpenCode | 2 | 8,568 tok |
| OWASP/AISVS The AI Security Verification Standard (AISVS) focuses on providing developers, architects, | 564 | Claude Code, Codex, OpenCode | 2 | 752 tok |
| ex-machina-co/opencode-anthropic-auth | 559 | Codex, OpenCode | 1 | 132 tok |
| ndycode/codex-multi-auth npmjs.com Codex CLI multi-account OAuth manager with account switching, health checks, runtime rotat | 556 | Codex, OpenCode | 1 | 6,249 tok |
| adshao/flounder flounders.xyz Autonomous white-hat security auditor for AI-driven code review, bug bounty research, expl | 525 | Codex, OpenCode | 1 | 6,332 tok |
| deonmenezes/mantishack mantishack.com Mantis Hack | 505 | Codex, OpenCode | 25 | 5,183 tok |
| epam/ai-dial-chat chat.dialx.ai A default UI for AI DIAL | 502 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 52 | 4,850 tok |
| dogwood-policy/dogwood dogwood-policy.github.io Reference parser and interpreter for the Dogwood policy language | 499 | Claude Code, Codex, OpenCode | 6 | 854 tok |
| professorpalmer/Puppetmaster Provider-neutral control plane for durable-state agent swarms: subprocess workers, leases, | 471 | Claude Code, Codex, Cursor, OpenCode | 2 | 4,706 tok |
| ParetoSecurity/pareto-mac paretosecurity.com Automatically audit your Mac for basic security hygiene. | 459 | Claude Code, Codex, OpenCode | 2 | 2,744 tok |
| matty69v/Bug-Bounty-Agents m-sec.tech AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes | 453 | Codex, OpenCode | 1 | 1,166 tok |
| FlareStarter/flarestarter flarestarter.com A full-stack, edge-native SaaS starter built with TanStack Start + Cloudflare Workers | 451 | Claude Code, Codex, OpenCode | 2 | 772 tok |
| leonvanzyl/agentic-coding-starter-kit | 449 | Claude Code, Codex, OpenCode | 27 | 351 tok |
| PrismorSec/prismor prismor.dev Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue t | 448 | Claude Code, Codex, OpenCode | 10 | 5,259 tok |
| smithersai/smithers smithers.sh Smithers is an agentic workflow framework for defining workflows in simple TypeScript conf | 440 | Claude Code, Codex, OpenCode | 9 | 5,207 tok |
| leancoderkavy/premiere-pro-mcp premiere-pro-mcp.com Adobe Premiere Pro MCP — independent, local-first server for supported workflows. Connect | 440 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 9 | 4,050 tok |
| suzuki-shunsuke/ghtkn A CLI to create short-lived (8 hours) GitHub App User Access Token for secure local develo | 436 | Claude Code, Codex, OpenCode | 2 | 19 tok |
| openhackai/OpenHack openhack.com Open Source Agentic Security Scanner | 430 | Codex, OpenCode | 1 | 218 tok |
| miniidealab/openlogos Open-source software development methodology for the AI era | Open-source software develop | 428 | Claude Code, Codex, OpenCode | 8 | 5,891 tok |
| canyonroad/agentsh agentsh.org Execution-Layer Security (ELS) for AI agents — policy-enforced shell with audit. | 404 | Claude Code, Codex, OpenCode | 2 | 596 tok |
| Nebulock-Inc/agentic-threat-hunting-framework ATHF is a framework for agentic threat hunting - building systems that can remember, learn | 402 | Claude Code, Codex, OpenCode | 3 | 9,623 tok |
| smart-mcp-proxy/mcpproxy-go mcpproxy.app Supercharge AI Agents, Safely | 399 | Claude Code, Codex, OpenCode | 2 | 6,639 tok |
| potatoqualitee/kbupdate 🛡 KB Viewer, Saver, Installer and Uninstaller | 393 | Claude Code, Codex, GitHub Copilot, OpenCode | 10 | 1,046 tok |
| cellebrite-labs/ghidra-rpc A Ghidra agentic reverse engineering skill. | 390 | Claude Code, Codex, OpenCode | 2 | 5,071 tok |
| arnica/depsguard depsguard.com Harden your package manager configs against supply chain attacks. | 383 | Codex, OpenCode | 1 | 2,669 tok |
| vulnersCom/api vulners.com Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits | 377 | Claude Code, Codex, OpenCode | 2 | 1,497 tok |
| secure-agentic-framework/saf-mcp secureagenticframework.org SAF-MCP is a comprehensive security framework for documenting and mitigating threats in th | 365 | Claude Code, Codex | 1 | — |
| mengjian-github/xiaomo-starter-kit xiaomo.dev 🐈⬛ OpenClaw Chinese AI assistant template | Get your own AI personal assistant in 5 minu | 364 | Codex, OpenCode | 1 | 261 tok |
| mapbox/mcp-server Mapbox Model Context Protocol (MCP) server | 363 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 2,525 tok |
| ericjypark/codex-island codexisland.com CodexIsland - AI usage limits in your MacBook notch | 360 | Claude Code, Codex, OpenCode | 2 | 4,316 tok |
| zksecurity/zkbugs bugs.zksecurity.xyz Reproduce ZKP vulnerabilities | 351 | Claude Code, Codex, OpenCode | 3 | 997 tok |