1,170 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| kpolley/redai AI-driven vulnerability discovery and live validation | 351 | Claude Code, Codex, OpenCode | 3 | 890 tok |
| semgrep/skills semgrep.dev A collection of skills for AI coding agents from Semgrep | 332 | Claude Code, Codex, OpenCode | 2 | 1,020 tok |
| AndrewDryga/emisar emisar.dev Let AI agents investigate and operate infrastructure through declared actions, bounded by | 330 | Claude Code, Codex, Gemini CLI, OpenCode | 30 | 2,020 tok |
| AojdevStudio/Finance-Guru aojdevstudio.github.io Self-hosted family office engine: typed Python calculators, a private SQLite ledger, and s | 329 | Claude Code, Codex, OpenCode | 7 | 2,163 tok |
| lbx154/Argus A self-evolving multi-agent system for autonomous research, operating 24/7 to explore, lea | 329 | Claude Code, Codex, GitHub Copilot | 2 | 616 tok |
| apollographql/apollo-mcp-server apollographql.com Apollo MCP Server | 317 | Claude Code, Codex, OpenCode | 5 | 1,057 tok |
| ucsandman/DashClaw dashclaw.io Remote approvals, policy checks, and execution evidence for unattended AI agents. | 313 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 30 | 10,158 tok |
| huacnlee/omamail huacnlee.github.io Omarchy mail plugin with Gmail, HEY and IMAP supports. | 313 | Claude Code, Codex, OpenCode | 5 | 1,728 tok |
| grisuno/LazyOwn grisuno.github.io 837 CLI commands. Multi-operator C2. 153 MCP tools for AI agents. The First OSS C2 with Li | 300 | Claude Code, Codex, OpenCode | 2 | 15,592 tok |
| jakejarvis/domainstack.io domainstack.io 🧰 All-in-one domain name intelligence as a service | 293 | Claude Code, Codex, OpenCode | 2 | 5,150 tok |
| Cisco-Talos/EvidenceForge Generate realistic synthetic security logs for cybersecurity threat hunting training and r | 290 | Claude Code, Codex, OpenCode | 2 | 11,973 tok |
| tarlepp/symfony-flex-backend Symfony Flex REST API template project | 288 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 5,478 tok |
| Amal-David/keyleak-detector Runtime leak detector for modern web apps - finds exposed API keys, validates BaaS misconf | 275 | Claude Code, Codex | 2 | — |
| zapier/sdk docs.zapier.com Agent-readable docs, verified examples, and skill manifest for @zapier/zapier-sdk | 269 | Claude Code, Codex, OpenCode | 2 | 2,403 tok |
| Coff0xc/AutoRedTeam-Orchestrator MCP-native security automation workbench (SDK + CLI + MCP) — authorized testing + static A | 267 | Codex, OpenCode | 1 | 1,747 tok |
| vinikjkkj/zapo zapo.to 🧩 Lightweight, high-performance TypeScript library for the WhatsApp Web protocol, built f | 264 | Claude Code, Codex, OpenCode | 2 | 13,042 tok |
| finos/git-proxy git-proxy.finos.org Deploy custom push protections and policies on top of Git | 262 | Claude Code, Codex, GitHub Copilot, OpenCode | 19 | 2,493 tok |
| akiselev/ghidra-cli Automate Ghidra reverse engineering from the command line — headless analysis, decompilati | 259 | Claude Code, Codex, OpenCode | 4 | 767 tok |
| adcontextprotocol/adcp Docs and reference implementation for the Ad Context Protocol | 257 | Claude Code, Codex, OpenCode | 31 | 254 tok |
| opensearch-project/security opensearch.org 🔐 Secure your cluster with TLS, numerous authentication backends, data masking, audit log | 255 | Codex, OpenCode | 1 | 2,250 tok |
| danyuchn/pii-guard Traditional Chinese (Taiwan) personal data de-identification tool that allows business doc | 252 | Claude Code, Codex, OpenCode | 3 | 1,729 tok |
| SCStelz/security-investigator Automated security investigation tool using Microsoft MCP Servers, GitHub Copilot, Python | 250 | Claude Code, Codex, GitHub Copilot | 29 | 22,159 tok |
| coconut-svsm/svsm COCONUT-SVSM | 244 | Codex, OpenCode | 1 | 4,005 tok |
| Hoylon/peerbridge-mcp Local-first, auditable multi-agent control room for coding, review, evidence, and private | 242 | Codex, OpenCode | 1 | 200 tok |
| lalitgehani/SnackBase snackbase.dev SnackBase is a Python/FastAPI-based BaaS providing auto-generated REST APIs, multi-tenancy | 240 | Claude Code, Codex, OpenCode | 2 | 4,079 tok |
| Sumukh/Ignite newline.co A comprehensive Flask boilerplate to build SaaS applications that includes Stripe billing, | 231 | Codex, OpenCode | 1 | 974 tok |
| sondera-ai/sondera-coding-agent-hooks Hooking implementations and supporting tools for various coding agents (Claude, Cursor, Ge | 230 | Claude Code, Codex, OpenCode | 3 | 1,505 tok |
| cynative/cynative cynative.com Open-source AI agent framework for cloud security across AWS, Azure, GCP and Kubernetes: A | 226 | Claude Code, Codex, OpenCode | 2 | 8,925 tok |
| gominimal/minimal minimal.dev Run your agent in a Minimal box. Ship and run software with isolation on your own computer | 226 | Claude Code, Codex, OpenCode | 2 | 4,989 tok |
| first-fluke/fullstack-starter deepwiki.org Production-ready fullstack monorepo template with Next.js, FastAPI, Flutter, Terraform, an | 224 | Claude Code, Codex, OpenCode | 7 | 1,029 tok |
| kstenerud/yoloai yoloai.dev Your agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right | 221 | Claude Code, Codex, OpenCode | 5 | 3,914 tok |
| sjkim1127/Reversecore_MCP A security-first MCP server that empowers AI agents to perform automated reverse engineeri | 213 | Codex, OpenCode | 1 | 2,574 tok |
| AnastasiyaW/codex-claude-code-config Claude Code, Codex, and multi-agent configuration system: principles, hooks, skills, and w | 212 | Claude Code, Codex, OpenCode | 2 | 10,629 tok |
| Dicklesworthstone/coding_agent_account_manager Sub-100ms auth switching for AI coding CLIs (Claude Code, Codex, Gemini, Grok, Cursor, and | 210 | Codex, OpenCode | 1 | 9,188 tok |
| spire-studio/cloakbot A privacy-first AI agent that sanitizes your prompts locally with a local LLM before forwa | 205 | Claude Code, Codex, OpenCode | 2 | 770 tok |
| chaitin/OctoBus chaitin.github.io A secure local gateway for AI agents to reliably call approved enterprise APIs, tools, and | 203 | Codex, OpenCode | 1 | 739 tok |
| supermemoryai/install-mcp npmjs.com A simple CLI to install MCP servers into any client - auth included! | 197 | Codex, OpenCode | 1 | 2,867 tok |
| step-security/dev-machine-guard stepsecurity.io Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages | 196 | Codex, OpenCode | 1 | 11,386 tok |
| databricks-industry-solutions/security-analysis-tool databricks-industry-solutions.github.io Security Analysis Tool (SAT) analyzes customer's Databricks account and workspace security | 190 | Claude Code, Codex, OpenCode | 3 | 8,442 tok |
| Paresh-Maheshwari/morphe-ai Morphe's AI-powered Android APK patching workspace — multi-agent pipeline for APK analysis | 188 | Codex, Kiro, OpenCode | 14 | 1,860 tok |
| sigbit/mcp-auth-proxy MCP Auth Proxy is a secure OAuth 2.1 authentication proxy for Model Context Protocol (MCP) | 183 | Codex, OpenCode | 1 | 528 tok |
| lennney/mcp-slim-guard take-a-deep-breath0.com Context compression for MCP. Same upstream call, exact results recoverable. | 182 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,224 tok |
| safedep/gryph gryph.sh Security layer for AI coding agents. Works with Claude Code, Cursor, Windsurf, Gemini CLI, | 180 | Claude Code, Codex, OpenCode | 5 | 1,341 tok |
| QuentinCody/interlinked-cli The harness for your harness. Local hooks, taste enforcement, and developer observability | 180 | Claude Code, Codex, OpenCode | 2 | 34,552 tok |
| stephnangue/warden wardengateway.com The secure gateway connecting AI agents to enterprise systems. | 179 | Codex, OpenCode | 1 | 1,385 tok |
| bbartling/open-fdd Fault Detection Diagnostics (FDD) for HVAC datasets | 176 | Claude Code, Codex, Cursor, OpenCode | 17 | 7,061 tok |
| wellwelwel/lagune lagune.ai 🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether | 173 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 6 | 2,785 tok |
| OracleNep/Nday-Exploit-Plan A collection of detailed information and exploitation methods for historical vulnerabiliti | 168 | Codex, OpenCode | 1 | 585 tok |
| vaibhavarora14/job-application-agent jobappagent.com JobAppAgent: open-source AI job application agent (Agent Skill + CLI). Searches wide, matc | 164 | Codex, OpenCode | 1 | 137 tok |
| DataDog/pathfinding.cloud pathfinding.cloud An AWS IAM Privilege Escalation Path Library | 160 | Claude Code, Codex, OpenCode | 7 | 7,912 tok |