286 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| Diplomat-ai/diplomat-agent diplomat.run What can your AI agent do to the real world? Scan your code. See which tool calls have zer | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,004 tok |
| hugobatista/copilot-instructions-unicode-injection Proof of Concept (PoC) demonstrating prompt injection vulnerability in AI code assistants | 7 | GitHub Copilot | 1 | 1,064 tok |
| omkhar/vulnerability-validation-skill | 7 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 5 | 3,231 tok |
| mozilla/blender mozilla.github.io | 7 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 319 tok |
| s977043/river-review river-review.the3396.com Turn reviews into organizational decision assets. Review Judgment as Code for AI-assisted | 7 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 10 | 7,238 tok |
| ArmisSecurity/armis-appsec-mcp AI-powered security scanning MCP plugin for Claude Code | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 8,554 tok |
| morooka-akira/aicm | 6 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 10 | 9,770 tok |
| PoulpYBifle/NCF-Coding-Best-Practices | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 7,859 tok |
| Contoso-State/red-team-agent-orchestration | 6 | Claude Code, Codex, GitHub Copilot, OpenCode | 49 | 3,541 tok |
| egarcia74/warp-sql-server-mcp egarcia74.github.io 🗄️ Model Context Protocol (MCP) server for SQL Server integration with Warp terminal. Exe | 6 | Codex, GitHub Copilot, OpenCode | 3 | 1,578 tok |
| intelligent-ears/pd-tools-mcp A Model Context Protocol (MCP) server that integrates [ProjectDiscovery](https://projectdi | 6 | GitHub Copilot | 1 | 130 tok |
| austinsonger/GRC-Mapping-Analyst GRC Mapping Analyst is a NIST IR 8477-based toolkit for AI-assisted cybersecurity crosswal | 6 | Codex, GitHub Copilot, Gemini CLI, OpenCode | 3 | 4,100 tok |
| Parth308/auditx auditx-cli.vercel.app | 6 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 415 tok |
| KSEGIT/Version-Sentinel ksegit.github.io Claude Code plugin that hard-blocks dependency additions, bumps, and downgrades until a fr | 6 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,447 tok |
| agent-receipts/openclaw obsigna.dev Agent Receipts / Obsigna plugin for OpenClaw — cryptographically signed audit trail for ag | 5 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 1,940 tok |
| karanb192/bouncer A one-file door-guard for coding agents — first-class on Claude Code (permissionDecision d | 5 | Codex, GitHub Copilot, OpenCode | 2 | 936 tok |
| Jordan231111/MalwareMinimizer Cross-platform Rust malware scanning CLI with quarantine, update workflows, tests, and CI | 5 | Codex, GitHub Copilot, OpenCode | 2 | 3,093 tok |
| opnsrcntrbtr/TrustVault-PWA trust-vault-pwa.vercel.app TrustVault is a privacy-first zero-knowledge Progressive Web App (PWA) credential manager | 5 | Claude Code, Codex, GitHub Copilot, OpenCode | 5 | 4,178 tok |
| paulwu/agent365-management Notes on how to manage Agent IDs with Agent 365 in Entra | 5 | Claude Code, GitHub Copilot | 11 | 2,745 tok |
| Reedboot/Triage-Saurus Security Triage using AI | 5 | Claude Code, Codex, GitHub Copilot, OpenCode | 13 | 68 tok |
| devbyray/github-copilot-starter GitHub Copilot Starter is a template repository for teams and organizations who want to st | 5 | GitHub Copilot | 9 | 3,991 tok |
| jonnybottles/patch-tuesday-mcp pypi.org MCP server for Microsoft Patch Tuesday - query MSRC security updates, CVEs, and KBs with E | 5 | Claude Code, GitHub Copilot | 2 | 10,790 tok |
| craigcossairt/trellis The structure a project grows on: a free starter template for AI-assisted development. One | 5 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 9 | 7,670 tok |
| jgiox/goodvibes One command. Production-grade project. No config. | 5 | Claude Code, Codex, GitHub Copilot, Gemini CLI, Kiro, OpenCode, Windsurf | 16 | 12,349 tok |
| rmyndharis/aimhooman aimhooman teaches coding agents Git etiquette—keeping agent memory, internal instructions, | 5 | Codex, GitHub Copilot, Gemini CLI, Kiro, OpenCode | 4 | 3,319 tok |
| ArabAgentSkills/arab-payments-skill-atlas AI agent skill atlas for safer Arab/MENA payment and BNPL integrations. | 5 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 803 tok |
| zebbern/termstack An open-source agentic vibe coding platform that helps you build your own platform (Claude | 4 | Claude Code, GitHub Copilot | 12 | 15,538 tok |
| VersoXBT/claude-initial-setup 75 skills, 14 agents, 15 commands for Claude Code. Plug-and-play starter kit covering Type | 4 | Codex, GitHub Copilot, Cursor, OpenCode | 3 | 4,908 tok |
| asterixix/polish-academic-mcp Polskie bazy wiedzy (od naukowych po dane statystyczne, prawne, meteorologiczne, normy ora | 4 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 18,482 tok |
| KyaniteLabs/DialectOS kyanitelabs.github.io Spanish dialect localization MCP server and CLI. Translate across 25 regional variants wit | 4 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 5 | 4,542 tok |
| jyunming/Axon jyunming.github.io Local-first RAG engine with cited answers from your own docs. GraphRAG, sealed sharing, MC | 4 | Codex, GitHub Copilot, OpenCode | 10 | 9,191 tok |
| ysfAskri/archguardian Stop AI from slowly destroying your codebase. Tool-agnostic CLI + git pre-commit hook that | 4 | Claude Code, GitHub Copilot, Cursor | 36 | 1,619 tok |
| segraef/sec-kit Security Pre-flight Kit | 4 | Claude Code, GitHub Copilot | 3 | 947 tok |
| IvanTsxx/AI-Nextjs-Monorepo-Starter A modern, AI-first Next.js monorepo template equipped with PostgreSQL, Prisma, Better-Auth | 4 | Claude Code, GitHub Copilot, Gemini CLI | 4 | 4,440 tok |
| florian101010/awesome-agentic-AI-coding-template Stop re-explaining your project to every AI agent. Pre-wired for Claude Code, Copilot, Cur | 4 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode | 26 | 3,985 tok |
| Mazalucas/El-DT-Lightweight-Army El DT is the framework that turns your AI into a Technical Director: it structures the con | 4 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 5 | 1,357 tok |
| windoze95/servicewow-mcp ServiceNow MCP Server — per-user delegated access via OAuth 2.0 | 4 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,233 tok |
| nav33n25/IMCP Welcome to IMCP – a deliberately vulnerable framework that exposes 14 critical security we | 4 | GitHub Copilot | 1 | 286 tok |
| sixees/mcp-curl Simple MCP server to execute cURL commands - ideal for Desktop AI Clients (Claude / ChatGP | 4 | Claude Code, GitHub Copilot | 2 | 1,939 tok |
| sandraschi/devices-mcp MCP server + web dashboard + Windows Tauri app for home LAN devices (Tapo, Hue, Ring, Nest | 4 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 7 | 3,339 tok |
| MilindGaharwar/fettle pypi.org Open-source trust layer for AI coding agents: in-session quality, delegation-safe policy, | 4 | Claude Code, Codex, GitHub Copilot, OpenCode | 18 | 250 tok |
| vaquarkhan/compliance-agent-skills 30 Agent Skills for deterministic USA compliance auditing of AI agents — HIPAA, NIST AI RM | 4 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 2,822 tok |
| juwonllee2024-dotcom/rulesync The ESLint & Babel for AI Agent Rules — Compile, lint, optimize, and sync instructions acr | 3 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 882 tok |
| SecondLifes/delphi-expert An opinionated ecosystem of rules, skills and steerings to elevate Delphi development to s | 3 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 11,182 tok |
| hyperpolymath/boj-server hyperpolymath.github.io One MCP stdio endpoint for a whole toolchain — GitHub, GitLab, cloud, mail, browser and re | 3 | GitHub Copilot | 1 | 510 tok |
| abhishekrai43/VulScan-MCP marketplace.visualstudio.com Security vulnerability scanner for VS Code. Scans dependencies for CVEs from NVD/OSV datab | 3 | GitHub Copilot | 1 | 833 tok |
| calllint/calllint calllint.com Pre-flight risk linting for MCP and agent tools — check the blast radius before your agent | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,203 tok |
| me-cedric/agent-compass Central agentic standards, guidelines, skills & bootstrap tooling for AI coding agents (Cl | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 1,283 tok |
| SlyBase/wordpress-slytranslate AI driven translation using native WordPress 7 AI connectors and provide AI abilities | 3 | GitHub Copilot | 7 | 18,512 tok |
| RichardGeorgeDavis/Codex-Workspace A local-first multi-repo workspace system with shared runtime control, memory, docs, and a | 3 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 1,610 tok |