1,980 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,374Claude Code6,573Data and AI3,706Backend and APIs3,486Languages3,398Planning3,181Git and workflow3,100Code review2,701Memory and context2,354Testing2,311Research2,292DevOps and cloud2,282
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| yee-yore/DorkAgent 🤖 LLM-powered agent for automated Google Dorking in bug hunting & pentesting. | 320 | Claude Code | 1 | 1,888 tok |
| badchars/darknet-mcp-server npmjs.com 66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onio | 318 | Claude Code | 1 | 336 tok |
| JDArmy/Evasion-SubAgents Claude Code evasion SubAgents | 315 | Claude Code | 10 | — |
| lbx154/Argus A self-evolving multi-agent system for autonomous research, operating 24/7 to explore, lea | 314 | Claude Code, Codex, GitHub Copilot | 2 | 616 tok |
| Encod3d-Sec/TORCH Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian | 314 | Claude Code | 1 | 7,786 tok |
| felipegcoutinho/openmonetis openmonetis.com Controle financeiro self-hosted com captura automática de notificações bancárias. Lançamen | 312 | Codex, OpenCode | 1 | 4,004 tok |
| 0rangec3t/Black-cat Claude Code RedTeam Skill — Hypothesis-Driven Cognitive Architecture. A hypothesis- and ev | 310 | Claude Code | 2 | — |
| apollographql/apollo-mcp-server apollographql.com Apollo MCP Server | 308 | Claude Code, Codex, OpenCode | 5 | 1,032 tok |
| db-lyon/ue-mcp ue-mcp.com Complete Unreal Engine development toolkit exposed as MCP tools. | 308 | Claude Code | 3 | 4,463 tok |
| ucsandman/DashClaw dashclaw.io Remote approvals, policy checks, and execution evidence for unattended AI agents. | 297 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 30 | 10,148 tok |
| semgrep/skills semgrep.dev A collection of skills for AI coding agents from Semgrep | 297 | Claude Code, Codex, OpenCode | 2 | 1,020 tok |
| HarmonicSecurity/claudit-sec Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibilit | 294 | Claude Code | 1 | 2,074 tok |
| SeaOf0/dsh-redteam-model Multiple modes built on dsh web for authorized security research by red teams, covering pe | 293 | Codex, OpenCode | 1 | 2,748 tok |
| GreyhavenHQ/greywall greywall.io Container-free, deny-by-default sandbox for AI coding agents. Kernel-enforced filesystem, | 291 | Claude Code | 1 | 749 tok |
| eqtylab/cupcake cupcake.eqtylab.io A native policy enforcement layer for AI coding agents. Built on OPA/Rego. | 289 | Claude Code, GitHub Copilot | 3 | 12,811 tok |
| mylee04/code-notify Cross-platform desktop notifications for Claude Code, Codex, and Gemini CLI. Install via H | 288 | Claude Code | 11 | — |
| sigcli/sigcli sigcli.ai The authentication CLI & Proxy for AI agents. Give agents access, not your credentials. | 288 | Claude Code | 10 | 2,140 tok |
| jakejarvis/domainstack.io domainstack.io 🧰 All-in-one domain name intelligence as a service | 286 | Claude Code, Codex, OpenCode | 2 | 5,046 tok |
| PlamenTSV/plamen Autonomous Web3 security audit agent for Claude Code | 286 | Claude Code, Codex | 1 | 1,396 tok |
| aartiq/servicenow-mcp servicenow-mcp.com ServiceNow MCP server: 450+ tools and 26 AI capabilities for any AI (Claude, ChatGPT, Gemi | 274 | Claude Code | 10 | — |
| SecurityClaw/SecurityClaw A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors Ope | 272 | Claude Code | 1 | — |
| lasso-security/claude-hooks lasso.security Lasso security integrations for Claude Code, including prompt-injection defenses | 265 | Claude Code | 3 | — |
| Coff0xc/AutoRedTeam-Orchestrator MCP-native security automation workbench (SDK + CLI + MCP) — authorized testing + static A | 263 | Codex, OpenCode | 1 | 1,693 tok |
| Hainrixz/cyber-neo tododeia.com Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabiliti | 257 | Claude Code | 1 | 876 tok |
| opensearch-project/security opensearch.org 🔐 Secure your cluster with TLS, numerous authentication backends, data masking, audit log | 252 | Codex, OpenCode | 1 | 2,198 tok |
| H4D3ZS/vscodium-rust cyberifrit.xyz AI-native IDE with agentic workflows, iPhone emulation on Windows/Linux, PyTorch ML Studi | 251 | Cursor | 1 | 344 tok |
| zapier/sdk docs.zapier.com Agent-readable docs, verified examples, and skill manifest for @zapier/zapier-sdk | 249 | Claude Code, Codex, OpenCode | 2 | 2,403 tok |
| finos/git-proxy git-proxy.finos.org Deploy custom push protections and policies on top of Git | 248 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 2,404 tok |
| bitwarden/mcp-server bitwarden.com MCP server for interaction with Bitwarden. | 248 | Claude Code | 1 | — |
| SCStelz/security-investigator Automated security investigation tool using Microsoft MCP Servers, GitHub Copilot, Python | 244 | Claude Code, Codex, GitHub Copilot | 29 | 22,159 tok |
| komunite/kalfa komunite.com.tr Claude Code için Türkçe profesyonel işletim sistemi — 10 uzman agent, 22 komut, 993 skill, | 244 | Claude Code | 7 | — |
| 0xiehnnkta/nemesis-auditor The Inescapable Auditor -- iterative deep-logic security audit agent for Claude Code | 243 | Claude Code | 1 | 618 tok |
| adcontextprotocol/adcp Docs and reference implementation for the Ad Context Protocol | 242 | Claude Code, Codex, OpenCode | 31 | 218 tok |
| coconut-svsm/svsm COCONUT-SVSM | 239 | Codex, OpenCode | 1 | 4,005 tok |
| lalitgehani/SnackBase snackbase.dev SnackBase is a Python/FastAPI-based BaaS providing auto-generated REST APIs, multi-tenancy | 238 | Claude Code, Codex, OpenCode | 2 | 4,006 tok |
| Hoylon/peerbridge-mcp Local-first, auditable multi-agent control room for coding, review, evidence, and private | 238 | Codex, OpenCode | 1 | 200 tok |
| erikdarlingdata/PerformanceStudio erikdarling.com Free, open-source SQL Server execution plan analyzer — cross-platform GUI + CLI with 30 an | 237 | Claude Code | 1 | — |
| Arenbai/SecSkills Professional penetration-testing skill module for Claude Code. Strictly follows the PTES s | 235 | Claude Code | 1 | 1,616 tok |
| Sumukh/Ignite newline.co A comprehensive Flask boilerplate to build SaaS applications that includes Stripe billing, | 232 | Codex, OpenCode | 1 | 974 tok |
| bx33661/Wireshark-MCP Wireshark-MCP，Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions i | 230 | Claude Code, GitHub Copilot | 3 | 235 tok |
| HeadyZhang/agent-audit headyzhang.github.io Static security scanner for LLM agents — prompt injection, MCP config auditing, taint anal | 226 | Claude Code | 1 | 3,386 tok |
| grisuno/LazyOwn reddit.com LazyOwn RedTeam/APT Framework is the first RedTeam Framework with an AI-powered C&C, featu | 226 | Claude Code, Codex, OpenCode | 2 | 15,495 tok |
| bhavsec/autopentest-ai Agentic Pentesting MCP server that discovers, exploits, and reports web application vulner | 226 | Claude Code | 1 | 29,523 tok |
| Cisco-Talos/EvidenceForge Generate realistic synthetic security logs for cybersecurity threat hunting training and r | 225 | Claude Code, Codex, OpenCode | 2 | 10,879 tok |
| sondera-ai/sondera-coding-agent-hooks Hooking implementations and supporting tools for various coding agents (Claude, Cursor, Ge | 223 | Claude Code, Codex, OpenCode | 3 | 1,505 tok |
| vinikjkkj/zapo zapo.to 🧩 Lightweight, high-performance TypeScript library for the WhatsApp Web protocol, built f | 223 | Claude Code, Codex, OpenCode | 2 | 12,947 tok |
| first-fluke/fullstack-starter deepwiki.org Production-ready fullstack monorepo template with Next.js, FastAPI, Flutter, Terraform, an | 222 | Claude Code, Codex, OpenCode | 8 | 3,600 tok |
| Esonhugh/pydoll-cf-waf-bypasser-skills An antibot WAF bypasser based on the pydoll framework, good at Cloudflare. Skills for bypa | 220 | Claude Code | 1 | — |
| JameZUK/Arkana arkana.re Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary | 218 | Claude Code | 7 | 9,744 tok |
| GaaraZhu/gate A deterministic privacy boundary between your data and AI. | 216 | Claude Code | 1 | 1,400 tok |