2,004 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,510Claude Code6,601Data and AI3,691Backend and APIs3,489Languages3,402Planning3,208Git and workflow3,142Code review2,734Memory and context2,361Testing2,349DevOps and cloud2,296Research2,292
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| pezhik/skilltotal skilltotal.ai Scan AI components (MCP servers, agent skills, npm/PyPI packages) for malware & risky capa | 1 | Claude Code | 1 | 3,300 tok |
| dinglebear-ai/soma soma.dinglebear.ai Batteries-included RMCP runtime and scaffold for shipping Rust MCP servers with CLI/REST/H | 1 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 6,471 tok |
| Roop-World/LegalSearch Agent kit and MCP Registry metadata for Roop LegalSearch, a public Indian legal search MCP | 1 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 303 tok |
| nick-timms/drag-mcp-server | 1 | Claude Code | 1 | 1,133 tok |
| Sequentum/sequentum-mcp An AI interface to control Sequentum Cloud agents | 1 | Claude Code | 2 | — |
| 0xfreak0/sui-mcp npmjs.com Read-only MCP server for investigating activity on Sui — fund tracing, funding-source attr | 1 | Claude Code | 2 | 13,254 tok |
| ANAMIZED/OpenMesha OpenMesha is one of the most ambitious and intellectually open-source full-spectrum “Auton | 1 | Codex, OpenCode | 1 | 603 tok |
| AgentTanuki/agent-guild agent-guild-5d5r.onrender.com The trust + settlement layer for AI agents — discover, vet, pay, and build portable reputa | 1 | Codex, Gemini CLI, OpenCode | 2 | 2,238 tok |
| CSOAI-ORG/dora-compliance-mcp meok.ai DORA (Regulation EU 2022/2554) compliance MCP for financial entities. ICT risk, incident c | 1 | Cursor | 1 | 203 tok |
| CSOAI-ORG/sbom-cyclonedx-mcp meok.ai SBOM CycloneDX 1.6 + SPDX 2.3. EO 14028 / NIS2 / CRA. Part of the CSOAI Layer-0: 8 protoco | 1 | Cursor | 1 | 201 tok |
| CSOAI-ORG/fda-samd-mcp meok.ai FDA AI/ML SaMD compliance MCP. 510(k), De Novo, PMA, PCCP, GMLP. MIT | 1 | Cursor | 1 | 195 tok |
| GuillaumeLessard/qector-claude-plugin qector.store QECTOR Quantum Error Correction: High-performance, mathematically verified local QEC engin | 1 | Claude Code, Codex, OpenCode | 2 | 1,878 tok |
| MrWizardlyLoaf/rugcheck-ai web-production-58d585.up.railway.app On-chain token-safety MCP for Solana AI trading agents — rug check, honeypot detection & a | 1 | Codex, OpenCode | 1 | 511 tok |
| Sanoy24/safe-fetch-mcp-server | 1 | Claude Code | 5 | 1,386 tok |
| WYRE-AI/kaseya-quote-manager-mcp MCP server for Kaseya Quote Manager (Datto Commerce) — read-only quotes, sales orders, pur | 1 | GitHub Copilot | 1 | 562 tok |
| WYRE-AI/huntress-mcp conduit.wyre.ai MCP server for the Huntress cybersecurity platform | 1 | GitHub Copilot | 1 | 550 tok |
| aileron-sh/aileron Tamper-evident flight recorder for AI agents - hash-chained, signed audit log of every too | 1 | Claude Code | 1 | 1,055 tok |
| orieg/gws-connector orieg.github.io Multi-account Google Workspace MCP server — Gmail, Calendar, and Drive with smart routing. | 1 | Codex, GitHub Copilot, OpenCode | 2 | 1,312 tok |
| chrbailey/promptspeak-mcp-server promptspeak.admin-as-a-service.com Pre-execution governance for AI agents. Sub-millisecond tool call validation, drift detect | 1 | Claude Code | 1 | 1,253 tok |
| davidmosiah/delx-memory npmjs.com Local-first persistent memory layer for AI agents. SQLite-backed, MCP-compatible, cross-ag | 1 | Codex, OpenCode | 1 | 416 tok |
| desper/quick-html-sharing qhs.fyi Indie SaaS for vibe coders to instantly share AI-generated HTML pages — unguessable URLs + | 1 | Claude Code, Codex, OpenCode | 2 | 3,608 tok |
| dockndevai/mcp-debezium dockndevai.github.io MCP server for Debezium / Kafka Connect — monitor & manage CDC connectors with security mo | 1 | Claude Code | 1 | — |
| dockndevai/mcp-keycloak dockndevai.github.io MCP server for Keycloak — multi-realm admin with security modes (read-only/read-write/admi | 1 | Claude Code | 1 | — |
| fantasyce/agent-runtime-proof fantasyce.github.io Local, read-only proof that a live Agent or MCP runtime matches an approved artifact. | 1 | Codex, OpenCode | 1 | 380 tok |
| visus-mcp/visus-mcp Security-first MCP tool. Sanitizes web content before it reaches your LLM. | 1 | Claude Code | 1 | 715 tok |
| marras0914/cordon | 1 | Claude Code | 1 | 3,834 tok |
| mordiaky/vouchspec vouchspec.plyrium.com Agent-only x402 service for signed exact-commit evidence on public Agent Skills | 1 | Codex, OpenCode | 1 | 169 tok |
| nolindnaidoo/secrets-le letools.dev Find hardcoded credentials in a codebase, and never print one into the report | 1 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 6 | 8,168 tok |
| pedroknigge/arkgate npmjs.com If the AI writes an illegal import, the write is rejected. The same check fails the pull r | 1 | Claude Code, Codex, OpenCode | 4 | 7,869 tok |
| stevologic/security-recipes.ai security-recipes.ai Turn security findings into bounded agent work: one recipe, scoped context, required proof | 1 | Codex, GitHub Copilot, OpenCode | 5 | 758 tok |
| threadlinqs-cmd/Threadlinqs-Security-Detection-MCP Unified Detection Engineering Platform — 7,283+ detections across Sigma, Splunk ESCU, Elas | 1 | Claude Code, Cursor | 15 | — |
| wei9072/aegis | 1 | Codex, OpenCode | 1 | 2,698 tok |
| srinivasan-sundaresan95/orihime smithery.ai Cross-repo code knowledge graph for Java/Kotlin/JS/TS — MCP server, taint analysis, call g | 1 | Claude Code, Codex, OpenCode | 3 | 1,402 tok |
| bajor/gmail-mcp-send-to-list-only send to list only gmail MCP for VPS | 1 | Codex, OpenCode | 1 | 130 tok |
| 100xPercent/pop-pay-python The runtime security layer for AI agent commerce | 1 | Claude Code | 1 | — |
| Quant-Off/skills Claude Code plugin marketplace for security auditing. evidence-based skills for constant-t | 1 | Claude Code | 1 | 1,385 tok |
| Synthrun/Cicada cicada-skill.vercel.app Cicada — Security Audit & Fix Skill for LLM coding agents (16 domains, cross-framework) | 1 | Codex, OpenCode | 1 | 210 tok |
| kefapps/onepassword-mcp-codex Standalone MCP server for 1Password desktop app integrations with opaque-by-default secret | 1 | Codex, OpenCode | 1 | 1,012 tok |
| odere-pro/claude-oop-excellence odere-pro.github.io Claude Code plugin that enforces good object-oriented design in any language — audits for | 1 | Claude Code | 2 | 1,406 tok |
| ReviewToolkits/cpython-security-toolkit A Claude Code plugin for finding semantic security flaws in CPython's standard library — a | 1 | Claude Code | 1 | 893 tok |
| ne11nn/cantos-plugin The full Cantos system as a one-command Claude Code plugin: a self-improving, multi-agent | 1 | Claude Code | 1 | — |
| richer-richard/cc-research Multi-agent deep research on Claude models: a Claude Code plugin + Agent SDK CLI sharing o | 1 | Claude Code, Codex, OpenCode | 1 | 962 tok |
| clever-cc-plugins/cc-content A Claude Code plugin that provides a suite of content creation skills for marketing projec | 1 | Claude Code | 4 | 1,657 tok |
| dmitriyoproii-pixel/claude-code-secrets-guard PreToolUse hook for Claude Code that blocks commands from leaking secrets (tokens, keys, c | 1 | Claude Code | 1 | 552 tok |
| davidomil/cloudx Run and supervise Codex CLI from your phone on your own Linux build machine, with local-fi | 1 | Claude Code, Codex, OpenCode | 12 | 645 tok |
| kronael/ship The planner-worker-judge driver for Claude Code and Codex | 1 | Claude Code | 1 | 1,595 tok |
| yu-iskw/coding-agent-fabric The standard fabric for AI agent resources: Manage, sync, and update across Cursor, Claude | 1 | Claude Code | 4 | 1,353 tok |
| mdabir1203/PromptBazaarAI banglaprompt-ai.pages.dev A Bangla-first AI prompt selling and creator platform built with React, Vite and Supabase. | 1 | Codex, OpenCode | 1 | 614 tok |
| PBNZ/pbnz-skills A personal collection of Agent Skills for Claude Code, Claude Cowork, Claude.ai, the Claud | 1 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 2,921 tok |
| curserio/codex-auth-switcher A simple CLI tool to switch between multiple Codex CLI accounts by managing auth.json prof | 1 | Codex, OpenCode | 1 | 1,559 tok |