1,581 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| vulnersCom/api vulners.com Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits | 377 | Claude Code, Codex, OpenCode | 2 | 1,497 tok |
| alexfazio/plankton Write-time code quality enforcement system for Claude Code. Every file edit triggers autom | 376 | Claude Code | 4 | — |
| secure-agentic-framework/saf-mcp secureagenticframework.org SAF-MCP is a comprehensive security framework for documenting and mitigating threats in th | 365 | Claude Code, Codex | 1 | — |
| mapbox/mcp-server Mapbox Model Context Protocol (MCP) server | 363 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 2,525 tok |
| ericjypark/codex-island codexisland.com CodexIsland - AI usage limits in your MacBook notch | 360 | Claude Code, Codex, OpenCode | 2 | 4,316 tok |
| bx33661/Wireshark-MCP Wireshark-MCP，Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions i | 358 | Claude Code, GitHub Copilot | 3 | 351 tok |
| YoshiiRyo1/document-templates-for-aws | 353 | Claude Code | 4 | 1,659 tok |
| zksecurity/zkbugs bugs.zksecurity.xyz Reproduce ZKP vulnerabilities | 351 | Claude Code, Codex, OpenCode | 3 | 997 tok |
| kpolley/redai AI-driven vulnerability discovery and live validation | 351 | Claude Code, Codex, OpenCode | 3 | 890 tok |
| m4xx101/cryptex-oss Open-source LLM red-teaming technique toolkit (162 transforms, 36 mutators, 25 tool surfac | 337 | Claude Code | 1 | 3,329 tok |
| Encod3d-Sec/TORCH Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian | 336 | Claude Code | 1 | 7,786 tok |
| semgrep/skills semgrep.dev A collection of skills for AI coding agents from Semgrep | 332 | Claude Code, Codex, OpenCode | 2 | 1,020 tok |
| AndrewDryga/emisar emisar.dev Let AI agents investigate and operate infrastructure through declared actions, bounded by | 330 | Claude Code, Codex, Gemini CLI, OpenCode | 30 | 2,020 tok |
| JDArmy/Evasion-SubAgents Claude Code evasion SubAgents | 330 | Claude Code | 10 | — |
| yee-yore/DorkAgent 🤖 LLM-powered agent for automated Google Dorking in bug hunting & pentesting. | 329 | Claude Code | 1 | 1,888 tok |
| AojdevStudio/Finance-Guru aojdevstudio.github.io Self-hosted family office engine: typed Python calculators, a private SQLite ledger, and s | 329 | Claude Code, Codex, OpenCode | 7 | 2,163 tok |
| lbx154/Argus A self-evolving multi-agent system for autonomous research, operating 24/7 to explore, lea | 329 | Claude Code, Codex, GitHub Copilot | 2 | 616 tok |
| 0rangec3t/Black-cat Claude Code RedTeam Skill — Hypothesis-Driven Cognitive Architecture. A hypothesis- and ev | 327 | Claude Code | 2 | — |
| apollographql/apollo-mcp-server apollographql.com Apollo MCP Server | 317 | Claude Code, Codex, OpenCode | 5 | 1,057 tok |
| ucsandman/DashClaw dashclaw.io Remote approvals, policy checks, and execution evidence for unattended AI agents. | 313 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 30 | 10,158 tok |
| huacnlee/omamail huacnlee.github.io Omarchy mail plugin with Gmail, HEY and IMAP supports. | 313 | Claude Code, Codex, OpenCode | 5 | 1,728 tok |
| GreyhavenHQ/greywall greywall.io Container-free, deny-by-default sandbox for AI coding agents. Kernel-enforced filesystem, | 311 | Claude Code | 1 | 749 tok |
| PlamenTSV/plamen Autonomous Web3 security audit agent for Claude Code | 309 | Claude Code | 1 | 1,396 tok |
| HarmonicSecurity/claudit-sec Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibilit | 300 | Claude Code | 1 | 2,074 tok |
| grisuno/LazyOwn grisuno.github.io 837 CLI commands. Multi-operator C2. 153 MCP tools for AI agents. The First OSS C2 with Li | 300 | Claude Code, Codex, OpenCode | 2 | 15,592 tok |
| eqtylab/cupcake cupcake.eqtylab.io A native policy enforcement layer for AI coding agents. Built on OPA/Rego. | 298 | Claude Code, GitHub Copilot | 3 | 12,811 tok |
| bitwarden/mcp-server bitwarden.com MCP server for interaction with Bitwarden. | 296 | Claude Code | 1 | — |
| jakejarvis/domainstack.io domainstack.io 🧰 All-in-one domain name intelligence as a service | 293 | Claude Code, Codex, OpenCode | 2 | 5,150 tok |
| sigcli/sigcli sigcli.ai The authentication CLI & Proxy for AI agents. Give agents access, not your credentials. | 291 | Claude Code | 10 | 2,140 tok |
| Hainrixz/cyber-neo tododeia.com Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabiliti | 291 | Claude Code | 1 | 876 tok |
| Cisco-Talos/EvidenceForge Generate realistic synthetic security logs for cybersecurity threat hunting training and r | 290 | Claude Code, Codex, OpenCode | 2 | 11,973 tok |
| mylee04/code-notify Cross-platform desktop notifications for Claude Code, Codex, and Gemini CLI. Install via H | 289 | Claude Code | 11 | — |
| tarlepp/symfony-flex-backend Symfony Flex REST API template project | 288 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 5,478 tok |
| SecurityClaw/SecurityClaw A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors Ope | 278 | Claude Code | 1 | — |
| Amal-David/keyleak-detector Runtime leak detector for modern web apps - finds exposed API keys, validates BaaS misconf | 275 | Claude Code, Codex | 2 | — |
| AgentSystemLabs/nebula | 271 | Claude Code | 3 | — |
| lasso-security/claude-hooks lasso.security Lasso security integrations for Claude Code, including prompt-injection defenses | 269 | Claude Code | 3 | — |
| zapier/sdk docs.zapier.com Agent-readable docs, verified examples, and skill manifest for @zapier/zapier-sdk | 269 | Claude Code, Codex, OpenCode | 2 | 2,403 tok |
| aartiq/servicenow-mcp servicenow-mcp.com ServiceNow MCP server: 500+ tools and 26 AI capabilities for any AI (Claude, ChatGPT, Gemi | 264 | Claude Code | 10 | — |
| vinikjkkj/zapo zapo.to 🧩 Lightweight, high-performance TypeScript library for the WhatsApp Web protocol, built f | 264 | Claude Code, Codex, OpenCode | 2 | 13,042 tok |
| finos/git-proxy git-proxy.finos.org Deploy custom push protections and policies on top of Git | 262 | Claude Code, Codex, GitHub Copilot, OpenCode | 19 | 2,493 tok |
| akiselev/ghidra-cli Automate Ghidra reverse engineering from the command line — headless analysis, decompilati | 259 | Claude Code, Codex, OpenCode | 4 | 767 tok |
| adcontextprotocol/adcp Docs and reference implementation for the Ad Context Protocol | 257 | Claude Code, Codex, OpenCode | 31 | 254 tok |
| JameZUK/Arkana arkana.re Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary | 253 | Claude Code | 7 | 9,744 tok |
| danyuchn/pii-guard Traditional Chinese (Taiwan) personal data de-identification tool that allows business doc | 252 | Claude Code, Codex, OpenCode | 3 | 1,729 tok |
| SCStelz/security-investigator Automated security investigation tool using Microsoft MCP Servers, GitHub Copilot, Python | 250 | Claude Code, Codex, GitHub Copilot | 29 | 22,159 tok |
| 0xiehnnkta/nemesis-auditor The Inescapable Auditor -- iterative deep-logic security audit agent for Claude Code | 249 | Claude Code | 1 | 618 tok |
| komunite/kalfa komunite.com.tr Claude Code için Türkçe profesyonel işletim sistemi — 10 uzman agent, 22 komut, 993 skill, | 246 | Claude Code | 7 | — |
| erikdarlingdata/PerformanceStudio erikdarling.com Free, open-source SQL Server execution plan analyzer — cross-platform GUI + CLI with 30 an | 245 | Claude Code | 1 | — |
| bhavsec/autopentest-ai Agentic Pentesting MCP server that discovers, exploits, and reports web application vulner | 245 | Claude Code | 1 | 29,523 tok |