1,115 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| grisuno/LazyOwn grisuno.github.io 837 CLI commands. Multi-operator C2. 153 MCP tools for AI agents. The First OSS C2 with Li | 300 | Claude Code, Codex, OpenCode | 2 | 15,592 tok |
| jakejarvis/domainstack.io domainstack.io 🧰 All-in-one domain name intelligence as a service | 293 | Claude Code, Codex, OpenCode | 2 | 5,150 tok |
| Cisco-Talos/EvidenceForge Generate realistic synthetic security logs for cybersecurity threat hunting training and r | 290 | Claude Code, Codex, OpenCode | 2 | 11,973 tok |
| tarlepp/symfony-flex-backend Symfony Flex REST API template project | 288 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 5,478 tok |
| zapier/sdk docs.zapier.com Agent-readable docs, verified examples, and skill manifest for @zapier/zapier-sdk | 269 | Claude Code, Codex, OpenCode | 2 | 2,403 tok |
| Coff0xc/AutoRedTeam-Orchestrator MCP-native security automation workbench (SDK + CLI + MCP) — authorized testing + static A | 267 | Codex, OpenCode | 1 | 1,747 tok |
| vinikjkkj/zapo zapo.to 🧩 Lightweight, high-performance TypeScript library for the WhatsApp Web protocol, built f | 264 | Claude Code, Codex, OpenCode | 2 | 13,042 tok |
| finos/git-proxy git-proxy.finos.org Deploy custom push protections and policies on top of Git | 262 | Claude Code, Codex, GitHub Copilot, OpenCode | 19 | 2,493 tok |
| akiselev/ghidra-cli Automate Ghidra reverse engineering from the command line — headless analysis, decompilati | 259 | Claude Code, Codex, OpenCode | 4 | 767 tok |
| adcontextprotocol/adcp Docs and reference implementation for the Ad Context Protocol | 257 | Claude Code, Codex, OpenCode | 31 | 254 tok |
| opensearch-project/security opensearch.org 🔐 Secure your cluster with TLS, numerous authentication backends, data masking, audit log | 255 | Codex, OpenCode | 1 | 2,250 tok |
| danyuchn/pii-guard Traditional Chinese (Taiwan) personal data de-identification tool that allows business doc | 252 | Claude Code, Codex, OpenCode | 3 | 1,729 tok |
| coconut-svsm/svsm COCONUT-SVSM | 244 | Codex, OpenCode | 1 | 4,005 tok |
| Hoylon/peerbridge-mcp Local-first, auditable multi-agent control room for coding, review, evidence, and private | 242 | Codex, OpenCode | 1 | 200 tok |
| lalitgehani/SnackBase snackbase.dev SnackBase is a Python/FastAPI-based BaaS providing auto-generated REST APIs, multi-tenancy | 240 | Claude Code, Codex, OpenCode | 2 | 4,079 tok |
| Sumukh/Ignite newline.co A comprehensive Flask boilerplate to build SaaS applications that includes Stripe billing, | 231 | Codex, OpenCode | 1 | 974 tok |
| sondera-ai/sondera-coding-agent-hooks Hooking implementations and supporting tools for various coding agents (Claude, Cursor, Ge | 230 | Claude Code, Codex, OpenCode | 3 | 1,505 tok |
| cynative/cynative cynative.com Open-source AI agent framework for cloud security across AWS, Azure, GCP and Kubernetes: A | 226 | Claude Code, Codex, OpenCode | 2 | 8,925 tok |
| gominimal/minimal minimal.dev Run your agent in a Minimal box. Ship and run software with isolation on your own computer | 226 | Claude Code, Codex, OpenCode | 2 | 4,989 tok |
| first-fluke/fullstack-starter deepwiki.org Production-ready fullstack monorepo template with Next.js, FastAPI, Flutter, Terraform, an | 224 | Claude Code, Codex, OpenCode | 7 | 1,029 tok |
| kstenerud/yoloai yoloai.dev Your agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right | 221 | Claude Code, Codex, OpenCode | 5 | 3,914 tok |
| sjkim1127/Reversecore_MCP A security-first MCP server that empowers AI agents to perform automated reverse engineeri | 213 | Codex, OpenCode | 1 | 2,574 tok |
| AnastasiyaW/codex-claude-code-config Claude Code, Codex, and multi-agent configuration system: principles, hooks, skills, and w | 212 | Claude Code, Codex, OpenCode | 2 | 10,629 tok |
| Dicklesworthstone/coding_agent_account_manager Sub-100ms auth switching for AI coding CLIs (Claude Code, Codex, Gemini, Grok, Cursor, and | 210 | Codex, OpenCode | 1 | 9,188 tok |
| spire-studio/cloakbot A privacy-first AI agent that sanitizes your prompts locally with a local LLM before forwa | 205 | Claude Code, Codex, OpenCode | 2 | 770 tok |
| chaitin/OctoBus chaitin.github.io A secure local gateway for AI agents to reliably call approved enterprise APIs, tools, and | 203 | Codex, OpenCode | 1 | 739 tok |
| supermemoryai/install-mcp npmjs.com A simple CLI to install MCP servers into any client - auth included! | 197 | Codex, OpenCode | 1 | 2,867 tok |
| step-security/dev-machine-guard stepsecurity.io Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages | 196 | Codex, OpenCode | 1 | 11,386 tok |
| databricks-industry-solutions/security-analysis-tool databricks-industry-solutions.github.io Security Analysis Tool (SAT) analyzes customer's Databricks account and workspace security | 190 | Claude Code, Codex, OpenCode | 3 | 8,442 tok |
| Paresh-Maheshwari/morphe-ai Morphe's AI-powered Android APK patching workspace — multi-agent pipeline for APK analysis | 188 | Codex, Kiro, OpenCode | 14 | 1,860 tok |
| sigbit/mcp-auth-proxy MCP Auth Proxy is a secure OAuth 2.1 authentication proxy for Model Context Protocol (MCP) | 183 | Codex, OpenCode | 1 | 528 tok |
| lennney/mcp-slim-guard take-a-deep-breath0.com Context compression for MCP. Same upstream call, exact results recoverable. | 182 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 1,224 tok |
| safedep/gryph gryph.sh Security layer for AI coding agents. Works with Claude Code, Cursor, Windsurf, Gemini CLI, | 180 | Claude Code, Codex, OpenCode | 5 | 1,341 tok |
| QuentinCody/interlinked-cli The harness for your harness. Local hooks, taste enforcement, and developer observability | 180 | Claude Code, Codex, OpenCode | 2 | 34,552 tok |
| stephnangue/warden wardengateway.com The secure gateway connecting AI agents to enterprise systems. | 179 | Codex, OpenCode | 1 | 1,385 tok |
| bbartling/open-fdd Fault Detection Diagnostics (FDD) for HVAC datasets | 176 | Claude Code, Codex, Cursor, OpenCode | 17 | 7,061 tok |
| wellwelwel/lagune lagune.ai 🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether | 173 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 6 | 2,785 tok |
| OracleNep/Nday-Exploit-Plan A collection of detailed information and exploitation methods for historical vulnerabiliti | 168 | Codex, OpenCode | 1 | 585 tok |
| vaibhavarora14/job-application-agent jobappagent.com JobAppAgent: open-source AI job application agent (Agent Skill + CLI). Searches wide, matc | 164 | Codex, OpenCode | 1 | 137 tok |
| DataDog/pathfinding.cloud pathfinding.cloud An AWS IAM Privilege Escalation Path Library | 160 | Claude Code, Codex, OpenCode | 7 | 7,912 tok |
| antropos17/Aegis antropos17.github.io Windows-first desktop oversight for AI agents: live monitoring, local security reviews, to | 159 | Claude Code, Codex, OpenCode | 2 | 658 tok |
| lanbaoshen/mcp-jenkins pypi.org The Model Context Protocol (MCP) is an open-source implementation that bridges Jenkins wit | 155 | Codex, OpenCode | 1 | 856 tok |
| Strategic-Automation/violin strategic-automation.github.io Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded ta | 155 | Codex, OpenCode | 1 | 2,590 tok |
| CyberStrategyInstitute/ai-safe2-framework cyberstrategyinstitute.com The Universal Governance, Risk, Compliance (GRC) Operating System with Integrated Security | 154 | Codex, OpenCode | 1 | 3,120 tok |
| WhitzardAgent/AgentGuard whitzard.tech AgentGuard: Zero-Trust Security Foundation for AI Agents | 154 | Codex, OpenCode | 1 | 1,264 tok |
| agentfront/frontmcp frontmcp.dev The TypeScript framework for MCP servers: typed tools with Zod, dependency injection, auth | 148 | Claude Code, Codex, OpenCode | 2 | 6,886 tok |
| LF-Decentralized-Trust-labs/gitmesh GitMesh: Policy-as-Code Engine for Open Source AI Agent Orchestration | 145 | Claude Code, Codex, OpenCode | 3 | 1,266 tok |
| marmot-protocol/marmot The Marmot Protocol is a messaging protocol that specifies how to do efficient end-to-end | 145 | Claude Code, Codex, OpenCode | 2 | 994 tok |
| vigolium/piolium vigolium.com A Pi-native extension for thorough, agentic security audits | 145 | Claude Code, Codex, OpenCode | 2 | 2,513 tok |
| mazrean/kessoku Next-generation google/wire with parallel dependency injection for Go | 142 | Claude Code, Codex, OpenCode | 2 | 2,025 tok |