2,143 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,356Claude Code6,837Data and AI3,595Backend and APIs3,545Git and workflow3,545Languages3,458Planning3,300Code review2,870Testing2,615DevOps and cloud2,441Writing and docs2,440Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| Firmislabs/firmis-scanner firmislabs.com AI agent runtime security scanner - detect malicious behavior in Claude Skills, MCP Server | 2 | Claude Code, Codex, OpenCode | 2 | 3,779 tok |
| Reedtrullz/codex-antigravity-auth pypi.org Released local Responses API gateway bringing Google Antigravity Claude Opus/Sonnet, Gemin | 2 | Codex, OpenCode | 1 | 1,193 tok |
| Nick2bad4u/SonarCloud-Skill npmjs.com AI skill for managing findings on SonarCloud / SonarQube | 2 | Codex, OpenCode | 1 | 435 tok |
| JKasteele/ai-act-companion huggingface.co Local-first, explainable EU AI Act risk classifier with risk-assessment/DPIA/bias/AI-secur | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 546 tok |
| piyushptiwari1/mcpkernel pypi.org The Security Kernel for AI Agents — MCP/A2A gateway with policy enforcement, taint trackin | 2 | Claude Code, Codex, GitHub Copilot | 8 | 2,161 tok |
| rmednitzer/relay-shell rmednitzer.github.io Model Context Protocol server for full shell and SSH fleet operation, with audit, tiered a | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 3,254 tok |
| Raed2180416/holt raed2180416.github.io See what coding agents changed across Git worktrees. Inspect duplicates, collisions and de | 2 | Claude Code, Codex, OpenCode | 5 | 1,120 tok |
| rushikeshmore/tor-mcp Every web request your LLM tool makes leaks your IP. tor-mcp routes them through Tor with | 2 | Claude Code | 1 | 1,132 tok |
| Sathvik-1007/sift-kernel AI forensic reasoning kernel — MCP server bridging LLM agents and DFIR toolchains with evi | 2 | Claude Code | 1 | 1,633 tok |
| mgalbakri/claude-code-mastery agentcodeacademy.com Agent Code Academy — A free 12-week course from zero coding to AI coding mastery with Clau | 2 | Claude Code | 14 | 1,029 tok |
| SinoEdwards/mail-agent-mcp Local-first email MCP server for Gmail and QQ Mail with secure OAuth, IMAP search/read, at | 2 | Claude Code, Codex, OpenCode | 2 | 967 tok |
| ambient-code/gps ambient-code.ai GPS — read-only MCP caching tier for org and engineering data | 2 | Claude Code | 4 | — |
| flic/node-red-contrib-mcp-server Generic Model Context Protocol (MCP) server nodes for Node-RED: expose flows as MCP tools | 2 | Claude Code | 7 | — |
| cyanheads/osv-advisory-mcp-server npmjs.com Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full ad | 2 | Claude Code, Codex, OpenCode | 2 | 14,050 tok |
| cyanheads/attack-surface-mcp-server npmjs.com Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS | 2 | Claude Code, Codex, OpenCode | 2 | 16,676 tok |
| BigfootBytes/threatlocker-mcp-server | 2 | Claude Code | 2 | 7,124 tok |
| Melvynx/lumail-skills lumail.io Lumail agent skills, MCP plugins, and setup docs for AI-native email marketing | 2 | Codex, OpenCode | 1 | 263 tok |
| oaslananka/infra-lens-mcp Baseline-aware MCP tooling for Linux incident diagnosis over SSH: capture bounded live met | 2 | Claude Code, Codex, OpenCode | 4 | 482 tok |
| oaslananka/ssh-mcp-pro npmjs.com Secure MCP server for SSH automation with guarded remote commands, host allowlists, strict | 2 | Claude Code, Codex, OpenCode | 4 | 1,363 tok |
| waanvar/samong samong.dev Local-first, Obsidian-compatible knowledge base. Your notes stay on your machine — full-te | 2 | Claude Code | 2 | 695 tok |
| bchoor/bws-mcp Remote MCP for Bitwarden Secrets Manager on Cloudflare Workers (list, get, put, delete) | 2 | Codex, OpenCode | 1 | 817 tok |
| ProductionMasterAI/production-master Thin-client plugin for the Production Master hosted service — trigger, stream, and review | 2 | Claude Code, Codex, OpenCode | 2 | 505 tok |
| coltonbearden/carrel coltonbearden.github.io Read, index, pack and file your documents — from the terminal, for you and your agents. | 2 | Claude Code | 2 | 1,328 tok |
| nacre-work/nacre nacre.work Self-hosted permission-aware context layer for agents. MCP + API. | 2 | Claude Code | 7 | — |
| cormac-rynne/hikvision-mcp | 2 | Codex, OpenCode | 1 | 1,019 tok |
| dalmaktube-creator/DV-Moory Self-hosted, security-hardened MCP server connecting Notion AI to approved Git repositorie | 2 | Codex, OpenCode | 1 | 192 tok |
| astafford8488/agentaegis-mcp MCP server for cybersecurity operations — compliance, vuln scans, code security, threat in | 1 | Codex, OpenCode | 1 | 2,212 tok |
| felipegcoutinho/openmonetis openmonetis.com Controle financeiro self-hosted com captura automática de notificações bancárias. Lançamen | 1 | Codex, OpenCode | 1 | 4,004 tok |
| TheArchitectit/agent-guardrails-template Template repository with AI agent guardrails, safety protocols, and sprint task framework. | 1 | Claude Code, GitHub Copilot, Windsurf | 3 | 2,499 tok |
| yugef3h/leo-skills agent-skills,Expert code review skill: SOLID, security, performance, error handling, bound | 1 | Claude Code | 1 | — |
| rahmanef63/connectors One MCP server, several ways to register and ship it. A guide repo an AI agent reads befor | 1 | Claude Code, Codex, OpenCode | 2 | 2,602 tok |
| bysonte/ssh-manager-mcp-server | 1 | Claude Code | 1 | 2,528 tok |
| oyusypenko/rob-mcp MCP server + x402-paid API for Robinhood Chain tokenized stocks — agent-callable premium/d | 1 | Claude Code, Codex, OpenCode | 12 | 6,813 tok |
| Johnny-Z13/proofslip proofslip.ai Ephemeral verification for agent workflows. 24-hour receipts your agents check before they | 1 | Claude Code, Codex | 4 | 1,608 tok |
| dinglebear-ai/soma soma.dinglebear.ai Batteries-included RMCP runtime and scaffold for shipping Rust MCP servers with CLI/REST/H | 1 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 6,471 tok |
| Roop-World/LegalSearch Agent kit and MCP Registry metadata for Roop LegalSearch, a public Indian legal search MCP | 1 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 303 tok |
| nick-timms/drag-mcp-server | 1 | Claude Code | 1 | 1,133 tok |
| Sequentum/sequentum-mcp An AI interface to control Sequentum Cloud agents | 1 | Claude Code | 2 | — |
| ANAMIZED/OpenMesha OpenMesha is one of the most ambitious and intellectually open-source full-spectrum “Auton | 1 | Codex, OpenCode | 1 | 603 tok |
| CSOAI-ORG/dora-compliance-mcp meok.ai 🏦 Exposes DORA (Regulation EU 2022/2554) tooling for financial entities over MCP — ICT-ri | 1 | Cursor | 1 | 203 tok |
| CSOAI-ORG/sbom-cyclonedx-mcp meok.ai 🔌 Exposes SBOM CycloneDX 1.6 + SPDX 2.3. EO 14028 / NIS2 / CRA. | 1 | Cursor | 1 | 201 tok |
| CSOAI-ORG/fda-samd-mcp meok.ai 🔌 Exposes FDA AI/ML SaMD compliance over MCP — 510(k), De Novo, PMA, PCCP, GMLP. MIT | 1 | Cursor | 1 | 195 tok |
| GuillaumeLessard/qector-claude-plugin qector.store QECTOR Quantum Error Correction: High-performance, mathematically verified local QEC engin | 1 | Claude Code, Codex, OpenCode | 2 | 1,878 tok |
| MrWizardlyLoaf/rugcheck-ai web-production-58d585.up.railway.app On-chain token-safety MCP for Solana AI trading agents — rug check, honeypot detection & a | 1 | Codex, OpenCode | 1 | 511 tok |
| Sanoy24/safe-fetch-mcp-server npmjs.com MCP fetch server with correct SSRF defense: resolve once, validate and pin the resolved IP | 1 | Claude Code | 4 | 1,453 tok |
| WYRE-AI/kaseya-quote-manager-mcp MCP server for Kaseya Quote Manager (Datto Commerce) — read-only quotes, sales orders, pur | 1 | GitHub Copilot | 1 | 562 tok |
| WYRE-AI/huntress-mcp conduit.wyre.ai MCP server for the Huntress cybersecurity platform | 1 | GitHub Copilot | 1 | 550 tok |
| aileron-sh/aileron Tamper-evident flight recorder for AI agents - hash-chained, signed audit log of every too | 1 | Claude Code | 1 | 1,093 tok |
| chrbailey/promptspeak-mcp-server promptspeak.admin-as-a-service.com Pre-execution governance for AI agents. Sub-millisecond tool call validation, drift detect | 1 | Claude Code | 1 | 1,253 tok |
| desper/quick-html-sharing qhs.fyi Indie SaaS for vibe coders to instantly share AI-generated HTML pages — unguessable URLs + | 1 | Claude Code, Codex, OpenCode | 2 | 3,608 tok |