1,480 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,374Claude Code6,573Data and AI3,706Backend and APIs3,486Languages3,398Planning3,181Git and workflow3,100Code review2,701Memory and context2,354Testing2,311Research2,292DevOps and cloud2,282
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| sebastienrousseau/pain001 docs.pain001.com Generate and validate ISO 20022 payment files (pain.001 v03-v12, pain.008) from CSV, SQLit | 49 | Claude Code, GitHub Copilot | 7 | 5,335 tok |
| agigante80/actual-mcp-server Talk to your self-hosted Actual Budget from any MCP client: a remote HTTP server for Libre | 49 | Claude Code, GitHub Copilot | 42 | 29,636 tok |
| badchars/osint-mcp-server OSINT intelligence MCP server for AI agents — 37 tools, 12 sources. Shodan, VirusTotal, Ce | 48 | Claude Code | 1 | 1,238 tok |
| RootCX/RootCX rootcx.com Governed infrastructure for internal tools and AI agents | 48 | Claude Code, Codex | 13 | 280 tok |
| marcieltorres/safe-chat-slack-bot marcieltorres.github.io SafeChat Slack Bot is an open-source project designed to enhance data security within Slac | 48 | Claude Code, Codex, OpenCode | 2 | 1,629 tok |
| senaykt/iac-security-scan-skills iac security scan skills for your AI workflows | 48 | Claude Code, Codex, OpenCode | 2 | 5,177 tok |
| schildep/verified-polygon-intersection schildep.github.io Formally verified polygon intersection | 48 | Claude Code | 2 | 746 tok |
| ByamB4/find-cve-agent CVE hunting harness for Claude Code - 20 skills, 5-agent team, systematic vulnerability re | 48 | Claude Code | 1 | 3,971 tok |
| matheusht/redthread An autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: | 48 | Claude Code, Codex, OpenCode | 10 | 1,929 tok |
| clawdsec/clawsec clawsec.bot Clawsec Plugin | 47 | Claude Code | 1 | 5,656 tok |
| openshift/service-ca-operator Controller to mint and manage serving certificates for Kubernetes services | 47 | Claude Code, Codex, OpenCode | 2 | 2,623 tok |
| aws-samples/sample-agent-skills-for-builders A curated collection of ready-to-use agent skills covering AWS development, security scann | 47 | Claude Code, Codex, OpenCode | 2 | 1,303 tok |
| web3insight-ai/web3insight web3insight.ai Discover, analyze, and connect with Web3 developers. Powered by GitHub data and on-chain a | 47 | Claude Code, Codex, OpenCode | 33 | 2,344 tok |
| sayanarijit/cottage cottage-cli.pages.dev A modern git based age-encrypted secrets manager for teams. | 47 | Claude Code | 4 | — |
| DiegoGuidaF/PulseWeaver Self-hosted forward-auth sidecar that gates your services by request IP + host — give fami | 47 | Claude Code, Codex, OpenCode | 2 | 1,431 tok |
| majorcontext/moat majorcontext.com Run agents in containers with credential injection and full observability. | 47 | Claude Code | 5 | 3,199 tok |
| bug-ops/mcp-execution 🚀 Generate executable TypeScript tools from MCP servers with 98% token savings. Progressi | 46 | Claude Code, GitHub Copilot | 14 | 19,355 tok |
| pgEdge/ai-dba-workbench docs.pgedge.com A PostgreSQL monitoring system built combining traditional and AI monitoring from the grou | 46 | Claude Code | 7 | 4,172 tok |
| Agent-Hellboy/mcp-server-fuzzer A generic mcp server fuzzer | 46 | Claude Code, Codex, OpenCode | 2 | 1,406 tok |
| madsnorgaard/drupal-agent-resources Reusable Claude Code resources for Drupal development - skills, agents, and commands | 46 | Claude Code | 13 | 556 tok |
| DelineaXPM/delinea-mcp MCP server for the Delinea Secret Server and Platform APIs | 46 | Claude Code, Codex, OpenCode | 2 | 2,032 tok |
| gl0bal01/malware-analysis-claude-skills gl0bal01.com Complete Claude skills toolkit for professional malware analysis. 5 specialized skills cov | 46 | Claude Code | 1 | 1,697 tok |
| bravodev-hub/appointme appointme.dev AppointMe is a modular-monolith .NET SaaS template with multitenancy, auth, billing and de | 46 | Claude Code | 2 | 2,201 tok |
| benchjack/benchjack AI agent benchmark hackability scanner — find evaluation vulnerabilities before they under | 46 | Claude Code | 2 | 614 tok |
| incubateur-ademe/benefriches benefriches.ademe.fr L'outil numérique qui quantifie et monétarise les impacts environnementaux, sociaux et éco | 45 | Claude Code, Codex, OpenCode | 22 | 2,117 tok |
| martinholovsky/claude-skills-generator | 45 | Claude Code | 8 | 671 tok |
| opensecurityarchitecture/osa-data Security architecture patterns and NIST 800-53 controls from opensecurityarchitecture.org | 45 | Claude Code | 2 | 2,251 tok |
| Nighthawk42/bnet_auth_tool Python CLI/GUI for Battle.net authenticators: back up TOTP secrets in an encrypted local v | 45 | Claude Code, Codex, OpenCode | 2 | 906 tok |
| ssdeanx/AgentStack AgentStack is a production-grade multi-agent framework built on Mastra, delivering 50+ ent | 44 | Claude Code, Codex, GitHub Copilot, OpenCode | 50 | 34,906 tok |
| TazWake/Public halkynconsulting.co.uk Collection of scripts provided for public use | 44 | Claude Code, Codex, OpenCode | 2 | 2,945 tok |
| abisheikM1/Tribunal | 44 | Claude Code | 1 | 2,264 tok |
| go-appsec/toolbox Collaborative application security testing between humans and agents via CLI and MCP | 43 | Claude Code, Codex, OpenCode | 2 | 6,730 tok |
| microsoft/azure-devops-skills Sample skills and prompt patterns demonstrating how to use the Azure DevOps MCP Server wit | 43 | Claude Code, Codex | 7 | — |
| koul777/Public-Regulation-MCP-Builder PR MCP Builder - MCP builder for public institution regulations | 43 | Claude Code, Codex, OpenCode | 3 | 467 tok |
| Robotti-io/copilot-security-instructions ✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward | 42 | Claude Code, Codex, GitHub Copilot | 12 | 1,869 tok |
| mgalgs/aur-sleuth mgalgs.io An LLM-powered security auditing tool for Arch User Repository (AUR) packages with yay int | 42 | Claude Code, Codex, OpenCode | 3 | 5,112 tok |
| Keyvanhardani/mythos-research doi.org Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source age | 42 | Claude Code | 1 | 339 tok |
| cameronapak/freedom-stack-v3 git.new A no-build, un-bloated stack built upon Web Standards that feels freeing to use and can be | 42 | Claude Code, Codex, OpenCode | 43 | 302 tok |
| Eldergenix/Proofloop Proof-driven Claude/Codex agent loop with paired execution, persistent resume, and adversa | 41 | Claude Code, Codex, OpenCode | 4 | 668 tok |
| FouadMagdy01/RNCopilot Production-ready React Native Expo starter template with auth, theming, i18n, and 33+ UI | 41 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 7 | 11,654 tok |
| championswimmer/env.sync.local envsync.arnav.tech sync your env secrets securely peer-to-peer on local networks | 41 | Claude Code, Codex, OpenCode | 2 | 5,036 tok |
| nitinjain999/platform-skills A platform engineering handbook covering Kubernetes, OpenShift, Argo CD, Flux CD, AWS, Azu | 41 | Claude Code, GitHub Copilot, Cursor | 3 | 7,970 tok |
| brandhaug/b2b-saas-starter b2b-saas-starter-web.brandhaug.workers.dev Cloudflare-first B2B SaaS monorepo starter. TanStack Start, Effect v4, Drizzle on D1, Bett | 41 | Claude Code, Codex, OpenCode | 2 | 1,128 tok |
| Rvn0xsy/sec-skills Security research skills repository | 40 | Claude Code | 1 | 1,267 tok |
| paidinesh7/onepager Two-stage financial analysis workflow — executive briefing first, detailed deep dive on re | 40 | Claude Code, Codex, OpenCode | 2 | 27,062 tok |
| lowtidebuild/contract-review | 40 | Claude Code | 20 | 2,443 tok |
| opena2a-org/hackmyagent Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source sec | 39 | Claude Code | 1 | — |
| Pantani/tdmcp pantani.github.io TouchDesigner MCP server, describe a visual to Claude, Cursor or Codex and it builds a rea | 39 | Claude Code, Codex, OpenCode | 3 | 7,962 tok |
| MarinJursic/production-readiness-checklist marinjursic.github.io Evidence-driven production readiness checklist for shipping web applications with confiden | 38 | Claude Code | 1 | 725 tok |
| tankpkg/tank tankpkg.dev Security-first package manager for AI agent skills | 38 | Claude Code, Codex, OpenCode | 3 | 8,837 tok |