2,137 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| Nebulock-Inc/agentic-threat-hunting-framework ATHF is a framework for agentic threat hunting - building systems that can remember, learn | 402 | Claude Code, Codex, OpenCode | 3 | 9,623 tok |
| hypnguyen1209/offensive-claude Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR | 402 | Claude Code | 1 | 4,209 tok |
| smart-mcp-proxy/mcpproxy-go mcpproxy.app Supercharge AI Agents, Safely | 399 | Claude Code, Codex, OpenCode | 2 | 6,639 tok |
| potatoqualitee/kbupdate 🛡 KB Viewer, Saver, Installer and Uninstaller | 393 | Claude Code, Codex, GitHub Copilot, OpenCode | 10 | 1,046 tok |
| pegasi-ai/reins reins.sh Stop AI agents from doing things you didn't ask for. | 392 | Claude Code | 3 | — |
| cellebrite-labs/ghidra-rpc A Ghidra agentic reverse engineering skill. | 390 | Claude Code, Codex, OpenCode | 2 | 5,071 tok |
| arnica/depsguard depsguard.com Harden your package manager configs against supply chain attacks. | 383 | Codex, OpenCode | 1 | 2,669 tok |
| vulnersCom/api vulners.com Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits | 377 | Claude Code, Codex, OpenCode | 2 | 1,497 tok |
| alexfazio/plankton Write-time code quality enforcement system for Claude Code. Every file edit triggers autom | 376 | Claude Code | 4 | — |
| secure-agentic-framework/saf-mcp secureagenticframework.org SAF-MCP is a comprehensive security framework for documenting and mitigating threats in th | 365 | Claude Code, Codex | 1 | — |
| mengjian-github/xiaomo-starter-kit xiaomo.dev 🐈⬛ OpenClaw Chinese AI assistant template | Get your own AI personal assistant in 5 minu | 364 | Codex, OpenCode | 1 | 261 tok |
| mapbox/mcp-server Mapbox Model Context Protocol (MCP) server | 363 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 2,525 tok |
| ericjypark/codex-island codexisland.com CodexIsland - AI usage limits in your MacBook notch | 360 | Claude Code, Codex, OpenCode | 2 | 4,316 tok |
| bx33661/Wireshark-MCP Wireshark-MCP，Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions i | 358 | Claude Code, GitHub Copilot | 3 | 351 tok |
| YoshiiRyo1/document-templates-for-aws | 353 | Claude Code | 4 | 1,659 tok |
| zksecurity/zkbugs bugs.zksecurity.xyz Reproduce ZKP vulnerabilities | 351 | Claude Code, Codex, OpenCode | 3 | 997 tok |
| kpolley/redai AI-driven vulnerability discovery and live validation | 351 | Claude Code, Codex, OpenCode | 3 | 890 tok |
| m4xx101/cryptex-oss Open-source LLM red-teaming technique toolkit (162 transforms, 36 mutators, 25 tool surfac | 337 | Claude Code | 1 | 3,329 tok |
| Encod3d-Sec/TORCH Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian | 336 | Claude Code | 1 | 7,786 tok |
| semgrep/skills semgrep.dev A collection of skills for AI coding agents from Semgrep | 332 | Claude Code, Codex, OpenCode | 2 | 1,020 tok |
| AndrewDryga/emisar emisar.dev Let AI agents investigate and operate infrastructure through declared actions, bounded by | 330 | Claude Code, Codex, Gemini CLI, OpenCode | 30 | 2,020 tok |
| JDArmy/Evasion-SubAgents Claude Code evasion SubAgents | 330 | Claude Code | 10 | — |
| yee-yore/DorkAgent 🤖 LLM-powered agent for automated Google Dorking in bug hunting & pentesting. | 329 | Claude Code | 1 | 1,888 tok |
| AojdevStudio/Finance-Guru aojdevstudio.github.io Self-hosted family office engine: typed Python calculators, a private SQLite ledger, and s | 329 | Claude Code, Codex, OpenCode | 7 | 2,163 tok |
| lbx154/Argus A self-evolving multi-agent system for autonomous research, operating 24/7 to explore, lea | 329 | Claude Code, Codex, GitHub Copilot | 2 | 616 tok |
| 0rangec3t/Black-cat Claude Code RedTeam Skill — Hypothesis-Driven Cognitive Architecture. A hypothesis- and ev | 327 | Claude Code | 2 | — |
| apollographql/apollo-mcp-server apollographql.com Apollo MCP Server | 317 | Claude Code, Codex, OpenCode | 5 | 1,057 tok |
| ucsandman/DashClaw dashclaw.io Remote approvals, policy checks, and execution evidence for unattended AI agents. | 313 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 30 | 10,158 tok |
| huacnlee/omamail huacnlee.github.io Omarchy mail plugin with Gmail, HEY and IMAP supports. | 313 | Claude Code, Codex, OpenCode | 5 | 1,728 tok |
| GreyhavenHQ/greywall greywall.io Container-free, deny-by-default sandbox for AI coding agents. Kernel-enforced filesystem, | 311 | Claude Code | 1 | 749 tok |
| PlamenTSV/plamen Autonomous Web3 security audit agent for Claude Code | 309 | Claude Code | 1 | 1,396 tok |
| HarmonicSecurity/claudit-sec Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibilit | 300 | Claude Code | 1 | 2,074 tok |
| grisuno/LazyOwn grisuno.github.io 837 CLI commands. Multi-operator C2. 153 MCP tools for AI agents. The First OSS C2 with Li | 300 | Claude Code, Codex, OpenCode | 2 | 15,592 tok |
| eqtylab/cupcake cupcake.eqtylab.io A native policy enforcement layer for AI coding agents. Built on OPA/Rego. | 298 | Claude Code, GitHub Copilot | 3 | 12,811 tok |
| bitwarden/mcp-server bitwarden.com MCP server for interaction with Bitwarden. | 296 | Claude Code | 1 | — |
| jakejarvis/domainstack.io domainstack.io 🧰 All-in-one domain name intelligence as a service | 293 | Claude Code, Codex, OpenCode | 2 | 5,150 tok |
| sigcli/sigcli sigcli.ai The authentication CLI & Proxy for AI agents. Give agents access, not your credentials. | 291 | Claude Code | 10 | 2,140 tok |
| Hainrixz/cyber-neo tododeia.com Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabiliti | 291 | Claude Code | 1 | 876 tok |
| Cisco-Talos/EvidenceForge Generate realistic synthetic security logs for cybersecurity threat hunting training and r | 290 | Claude Code, Codex, OpenCode | 2 | 11,973 tok |
| mylee04/code-notify Cross-platform desktop notifications for Claude Code, Codex, and Gemini CLI. Install via H | 289 | Claude Code | 11 | — |
| tarlepp/symfony-flex-backend Symfony Flex REST API template project | 288 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 5,478 tok |
| SecurityClaw/SecurityClaw A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors Ope | 278 | Claude Code | 1 | — |
| Amal-David/keyleak-detector Runtime leak detector for modern web apps - finds exposed API keys, validates BaaS misconf | 275 | Claude Code, Codex | 2 | — |
| AgentSystemLabs/nebula | 271 | Claude Code | 3 | — |
| lasso-security/claude-hooks lasso.security Lasso security integrations for Claude Code, including prompt-injection defenses | 269 | Claude Code | 3 | — |
| zapier/sdk docs.zapier.com Agent-readable docs, verified examples, and skill manifest for @zapier/zapier-sdk | 269 | Claude Code, Codex, OpenCode | 2 | 2,403 tok |
| Coff0xc/AutoRedTeam-Orchestrator MCP-native security automation workbench (SDK + CLI + MCP) — authorized testing + static A | 267 | Codex, OpenCode | 1 | 1,747 tok |
| aartiq/servicenow-mcp servicenow-mcp.com ServiceNow MCP server: 500+ tools and 26 AI capabilities for any AI (Claude, ChatGPT, Gemi | 264 | Claude Code | 10 | — |
| vinikjkkj/zapo zapo.to 🧩 Lightweight, high-performance TypeScript library for the WhatsApp Web protocol, built f | 264 | Claude Code, Codex, OpenCode | 2 | 13,042 tok |
| finos/git-proxy git-proxy.finos.org Deploy custom push protections and policies on top of Git | 262 | Claude Code, Codex, GitHub Copilot, OpenCode | 19 | 2,493 tok |