2,137 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| pdovhomilja/nextcrm-app demo.nextcrm.io NextCRM — Open-source CRM built with Next.js 16, React 19, PostgreSQL, Prisma 7, and shadc | 727 | Codex, OpenCode | 1 | 1,328 tok |
| arklexai/Agent-First-Organization arklex.ai The official Python library for Arklex framework | 699 | Claude Code | 8 | 633 tok |
| arcjet/arcjet-js arcjet.com Runtime security for AI apps and agents: prompt injection detection, tool-call authorizati | 694 | Codex, OpenCode | 1 | 752 tok |
| vz-risk/VCDB VERIS Community Database | 674 | Claude Code | 2 | 1,089 tok |
| SonarSource/sonarqube-mcp-server sonarsource.com Official SonarQube MCP Server for code quality and security in AI agents | 674 | Codex, OpenCode | 1 | 2,487 tok |
| Zyrexnn/Cybermes Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes | 668 | Codex, Cursor, OpenCode | 2 | 2,021 tok |
| samvallad33/vestige Think before doing, prove before saving. Vestige is a local, deterministic safety kernel | 656 | Claude Code, Codex, OpenCode | 2 | 2,351 tok |
| apache/casbin-gateway gateway.casbin.org See what every AI coding agent on your machine is doing, and whether the API behind it is | 643 | Claude Code | 1 | 134 tok |
| nirholas/XActions xactions.app ⚡ The Complete X/Twitter Automation Toolkit — Scrapers, MCP server for AI agents (Claude/G | 624 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 11 | 8,538 tok |
| provos/ironcurtain ironcurtain.dev A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*htt | 615 | Claude Code, GitHub Copilot, Gemini CLI | 10 | 9,002 tok |
| emersonfelipesp/netbox-proxbox emersonfelipesp.com Netbox Plugin for integration between Proxmox and Netbox | 606 | Claude Code, Codex, OpenCode | 2 | 14,169 tok |
| chainloop-dev/chainloop docs.chainloop.dev Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Sig | 606 | Claude Code | 14 | 3,767 tok |
| alibaba/anolisa agentic-os.sh ANOLISA (Agentic Nexus Operating Layer & Interface System Architecture) | Agentic OS with | 603 | Codex, OpenCode | 1 | 5,082 tok |
| emiliaprotocol/emilia-protocol emiliaprotocol.ai Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned ma | 599 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 1,869 tok |
| transilienceai/communitytools transilience.ai Open-source Claude Code skills, agents, and slash commands for AI-powered penetration test | 595 | Claude Code | 2 | 1,060 tok |
| thunder-id/thunderid thunderid.dev ThunderID, an LF Decentralized Trust project, is a high-performance, open-source identity | 594 | Claude Code, Codex, GitHub Copilot, OpenCode | 14 | 1,678 tok |
| yhy0/CHYing-agent zc.tencent.com Tencent Cloud Hackathon - Intelligent Penetration Testing Challenge, First Edition Top 9 | 590 | Claude Code | 1 | — |
| KeyValueSoftwareSystems/agent-opfor Open-source adversary emulation for AI agents and MCP servers. | 584 | Claude Code, Codex, OpenCode | 2 | 8,568 tok |
| ksenxx/kiss_ai KISS Sorcar: Keep it Simple, Stupid AI General Purpose Agent Framework for Long Horizon Ta | 564 | Claude Code | 1 | 311 tok |
| OWASP/AISVS The AI Security Verification Standard (AISVS) focuses on providing developers, architects, | 564 | Claude Code, Codex, OpenCode | 2 | 752 tok |
| ex-machina-co/opencode-anthropic-auth | 559 | Codex, OpenCode | 1 | 132 tok |
| ndycode/codex-multi-auth npmjs.com Codex CLI multi-account OAuth manager with account switching, health checks, runtime rotat | 556 | Codex, OpenCode | 1 | 6,249 tok |
| adshao/flounder flounders.xyz Autonomous white-hat security auditor for AI-driven code review, bug bounty research, expl | 525 | Codex, OpenCode | 1 | 6,332 tok |
| Prohao42/aimy-skill aimy-skill is a lightweight, embeddable penetration testing assistant skill for AI Agents, | 522 | Claude Code | 1 | 770 tok |
| Masriyan/Claude-Code-CyberSecurity-Skill security-life.org 22 production-quality Claude Code Skills for cybersecurity professionals , covering offens | 518 | Claude Code | 1 | 1,169 tok |
| deonmenezes/mantishack mantishack.com Mantis Hack | 505 | Codex, OpenCode | 25 | 5,183 tok |
| MHaggis/Security-Detections-MCP detect.michaelhaag.org MCP to help Defenders Detection Engineer Harder and Smarter | 503 | Claude Code, Cursor | 30 | — |
| epam/ai-dial-chat chat.dialx.ai A default UI for AI DIAL | 502 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 52 | 4,850 tok |
| dogwood-policy/dogwood dogwood-policy.github.io Reference parser and interpreter for the Dogwood policy language | 499 | Claude Code, Codex, OpenCode | 6 | 854 tok |
| OWASP/DockSec owasp.github.io AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWAS | 498 | Cursor | 1 | 112 tok |
| disler/claude-code-damage-control | 480 | Claude Code | 5 | 17 tok |
| GoPlusSecurity/agentguard Security guard for AI agents — blocks malicious skills, prevents data leaks, protects secr | 480 | Claude Code | 1 | 340 tok |
| badchars/darknet-mcp-server npmjs.com 66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onio | 478 | Claude Code | 1 | 336 tok |
| zhuyansen/agent-skills-hub agentskillshub.top Discover and compare open-source Agent Skills, tools & MCP servers — with quality scoring, | 474 | Claude Code | 6 | 2,564 tok |
| professorpalmer/Puppetmaster Provider-neutral control plane for durable-state agent swarms: subprocess workers, leases, | 471 | Claude Code, Codex, Cursor, OpenCode | 2 | 4,706 tok |
| ParetoSecurity/pareto-mac paretosecurity.com Automatically audit your Mac for basic security hygiene. | 459 | Claude Code, Codex, OpenCode | 2 | 2,744 tok |
| SponsioLabs/Sponsio sponsio.dev Deterministic safety solutions for probabilistic AI agents | 455 | Claude Code | 1 | 2,228 tok |
| matty69v/Bug-Bounty-Agents m-sec.tech AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes | 453 | Codex, OpenCode | 1 | 1,166 tok |
| adithyan-ak/AgentHound agenthound.io Offensive security framework for AI agent infrastructure - recon, credential looting, mode | 453 | Claude Code | 2 | 1,136 tok |
| FlareStarter/flarestarter flarestarter.com A full-stack, edge-native SaaS starter built with TanStack Start + Cloudflare Workers | 451 | Claude Code, Codex, OpenCode | 2 | 772 tok |
| leonvanzyl/agentic-coding-starter-kit | 449 | Claude Code, Codex, OpenCode | 27 | 351 tok |
| PrismorSec/prismor prismor.dev Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue t | 448 | Claude Code, Codex, OpenCode | 10 | 5,259 tok |
| db-lyon/ue-mcp ue-mcp.com Complete Unreal Engine development toolkit exposed as MCP tools. | 448 | Claude Code | 3 | 7,277 tok |
| smithersai/smithers smithers.sh Smithers is an agentic workflow framework for defining workflows in simple TypeScript conf | 440 | Claude Code, Codex, OpenCode | 9 | 5,207 tok |
| leancoderkavy/premiere-pro-mcp premiere-pro-mcp.com Adobe Premiere Pro MCP — independent, local-first server for supported workflows. Connect | 440 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 9 | 4,050 tok |
| suzuki-shunsuke/ghtkn A CLI to create short-lived (8 hours) GitHub App User Access Token for secure local develo | 436 | Claude Code, Codex, OpenCode | 2 | 19 tok |
| openhackai/OpenHack openhack.com Open Source Agentic Security Scanner | 430 | Codex, OpenCode | 1 | 218 tok |
| miniidealab/openlogos Open-source software development methodology for the AI era | Open-source software develop | 428 | Claude Code, Codex, OpenCode | 8 | 5,891 tok |
| ai-sdlc-framework/ai-sdlc ai-sdlc.io Declarative governance framework for AI-augmented software development lifecycles | 423 | Claude Code | 7 | 3,078 tok |
| canyonroad/agentsh agentsh.org Execution-Layer Security (ELS) for AI agents — policy-enforced shell with audit. | 404 | Claude Code, Codex, OpenCode | 2 | 596 tok |