1,170 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| GitGuardian/ggmcp gitguardian.com MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 | 41 | Claude Code, Codex, OpenCode, Windsurf | 5 | 2,572 tok |
| zoeynine/Local-Codex-Bridge A lightweight Windows bridge that lets ChatGPT invoke native Codex sessions on the local m | 41 | Codex, OpenCode | 1 | 3,588 tok |
| XZXZZX-Ai/bilibili-mcp Bilibili MCP tool A Bilibili MCP server | 41 | Claude Code, Codex, OpenCode | 14 | 1,197 tok |
| Eldergenix/Proofloop Proof-driven Claude/Codex agent loop with paired execution, persistent resume, and adversa | 40 | Claude Code, Codex, OpenCode | 4 | 668 tok |
| paidinesh7/onepager Two-stage financial analysis workflow — executive briefing first, detailed deep dive on re | 40 | Claude Code, Codex, OpenCode | 2 | 27,062 tok |
| Prismer-AI/signet signet-auth.vercel.app Cryptographic trust and authorization evidence for AI agents. Every action a receipt, ever | 40 | Codex, OpenCode | 1 | 657 tok |
| chambear2809/splunk-cisco-skills Skills that make your agent a Splunk Engineer | 40 | Claude Code, Codex, OpenCode | 3 | 14,897 tok |
| ChronoAIProject/NyxID nyx.chrono-ai.fun Connect AI agents to any API, anywhere. Securely. Open-source gateway that proxies request | 40 | Claude Code, Codex, OpenCode | 2 | 37,916 tok |
| nirholas/Binance-MCP A Model Context Protocol (MCP) server for Binance.com API. Offers standardized access to s | 40 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 924 tok |
| ivan-magda/swift-security-skill AI agent skill for secure credential storage & cryptography on Apple platforms - Keychain | 40 | Claude Code, Codex, OpenCode | 2 | 847 tok |
| tankpkg/tank tankpkg.dev Security-first package manager for AI agent skills | 38 | Claude Code, Codex, OpenCode | 3 | 8,837 tok |
| advanced-security/codeql-development-mcp-server LLM <-- MCP --> CodeQL( AST | CFG | CLI | LSP ) | 38 | Claude Code, Codex, GitHub Copilot | 22 | 8,231 tok |
| alicankiraz1/SentinelXPrime Stage-aware security skills for Codex, Claude Code, and OpenCode, with explicit compatibil | 38 | Codex, OpenCode | 1 | 353 tok |
| mifunedev/openharness oh.mifune.dev 🏗️ Run coding agents in a sandbox, not on your machine. | 37 | Claude Code, Codex, OpenCode | 6 | 2,015 tok |
| rapid7/rapid7-bulk-export-mcp Rapid7 Bulk Export MCP - AI-powered analysis for Rapid7 Command Platform data using MCP (M | 37 | Codex, Kiro, OpenCode | 4 | 4,303 tok |
| GSA-TTS/agentic-coding-playbook Practical, tool-agnostic playbook for federal employees building software with AI coding a | 37 | Claude Code, Codex, OpenCode | 13 | 12,245 tok |
| KhaledSaeed18/node-express-boilerplate Production-ready Express + TypeScript backend boilerplate with clean layered architecture, | 36 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 6 | 1,536 tok |
| chohra-med/expo_boilerplate aimobilelauncher.com AI-first React Native and Expo boilerplate. Feature-first architecture, TypeScript, auth, | 36 | Claude Code, Codex, OpenCode | 2 | 1,127 tok |
| Infisical/ai-skills AI skills and MCP connection for Infisical -- Stop your AI from hallucinating about Infisi | 35 | Codex, OpenCode | 1 | 2,391 tok |
| JeongJaeSoon/agent-guard Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and | 35 | Codex, OpenCode | 1 | 235 tok |
| ali-ulu/huqan huqan.com Local-first verification layer for AI agents: evidence, provenance, policy gates, human ap | 35 | Codex, GitHub Copilot, OpenCode | 5 | 3,605 tok |
| kupzed/catatz catatz.vercel.app A personal finance management app powered by Next.js and Supabase. Key features include tr | 34 | Claude Code, Codex, Gemini CLI, OpenCode | 26 | 3,667 tok |
| mishrasanjeev/grantex grantex.dev grantex is the identity, authorization, and audit infrastructure for AI agents — the "OAut | 33 | Claude Code, Codex, OpenCode | 2 | 2,932 tok |
| girijashankarj/cursor-handbook Open-source rules engine for Cursor IDE — 110 rules, agents, skills, commands that give AI | 33 | Claude Code, Codex, OpenCode | 2 | 933 tok |
| 10Legs/freelance-developer-harness A Claude Code operating system for running a structured agency team. 25 specialized roles | 33 | Claude Code, Codex, OpenCode | 5 | 5,267 tok |
| EndlessBlueWJL/schengen-visa-guide Schengen visa AI Agent skill — customized checklists by applicant profile, cross-session m | 32 | Codex, OpenCode | 1 | 274 tok |
| mehmetnadir/cdpilot cdpilot.ndr.ist Browser automation CLI on raw CDP — no Puppeteer, Playwright or Selenium, 0 npm dependenci | 32 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 3,615 tok |
| sseshachala/conductai conductai.ai Runtime governance for AI agents. Allow, warn, or block every model and tool call before i | 32 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 11 | 5,722 tok |
| msaad00/agent-bom msaad00.github.io Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence m | 31 | Claude Code, Codex, OpenCode | 2 | 417 tok |
| kissrosecicd-hub/agents-evolution [Legacy] Optimized AGENTS.md system instructions for AI CLI/IDE agents. Token-efficient (C | 31 | Claude Code, Codex, OpenCode | 41 | 5,881 tok |
| krivoox/agent-stack-template Agent-first multi-tenant Next.js template (rules, sub-agents, skills, Better Auth, Prisma) | 31 | Claude Code, Codex, OpenCode | 2 | 2,203 tok |
| anthonyhaussman/opencode-agy-auth npmjs.com Antigravity auth plugin for opencode | 31 | Codex, OpenCode | 1 | 4,665 tok |
| rsdouglas/janee janee.io Secrets management for AI agents via MCP • @janeesecure | 30 | Claude Code, Codex, OpenCode | 2 | 506 tok |
| luisfurquim/wings WINGS is an open-source, simple golang-based platform for front-end web application develo | 29 | Claude Code, Codex, GitHub Copilot, OpenCode | 9 | 2,431 tok |
| Hack23/European-Parliament-MCP-Server hack23.com European Parliament MCP Server - Political intelligence for AI agents | 29 | Claude Code, Codex, GitHub Copilot | 56 | 1,498 tok |
| nirholas/lyra-intel nirholas.github.io Lyra Intel is an intelligence platform designed to analyze repositories of any size - from | 29 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 807 tok |
| IgorGanapolsky/ThumbGate thumbgate.ai ThumbGate Pre-Action Checks self-improve from ranked lessons and repeated failures, hard-b | 29 | Claude Code, Codex, Gemini CLI, OpenCode | 74 | 13,645 tok |
| MythicAgents/sage Sage is a virtual Mythic agent that that uses an AI agentic system to operate Mythic and M | 29 | Claude Code, Codex, OpenCode | 6 | 2,501 tok |
| Liberty91LTD/cti-skills liberty91.com Cyber Threat Intelligence Skills for each stage of the CTI Lifecycle. | 29 | Claude Code, Codex, OpenCode | 4 | 2,621 tok |
| CrowdStrike/fusion-skills crowdstrike.com AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discov | 28 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,316 tok |
| barvhaim/HoneyMCP A Deception Security Layer for MCP Servers. It injects "ghost tools" (fake security-sensit | 28 | Claude Code, Codex, OpenCode | 2 | 4,918 tok |
| badbread/crumbvms crumbvms.com A self-hosted, operator-grade NVR for your own security cameras: recording, motion, licens | 28 | Claude Code, Codex, OpenCode | 2 | 2,361 tok |
| maddexritter-rgb/vibe-editing Raw footage in, finished captioned vertical clips out — with one command. A Claude Code pl | 28 | Claude Code, Codex, OpenCode | 2 | 1,295 tok |
| Raftersecurity/rafter-cli rafter.so Multi-language CLI for Rafter — the security toolkit built for AI coding agents and the de | 28 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,033 tok |
| nik1t7n/context-firewall Local-first context firewall for coding agents | 27 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 358 tok |
| fiberplane/mcp-gateway Gateway for inspecting and auditing your MCP servers | 27 | Claude Code, Codex, OpenCode | 2 | 5,849 tok |
| gaspareduard/Omada-mcp Security-first MCP server for TP-Link Omada, with a stdio-first runtime, capability-gated | 27 | Claude Code, Codex, OpenCode | 3 | 2,713 tok |
| cardstack/boxel A new approach to building composable software, from Cardstack. | 27 | Claude Code, Codex, OpenCode | 64 | 7,540 tok |
| anasfik/FlutterGuard Flutter APK/AAB security SKILL.md for OpenClaw, Codex, Claude Code, and other AI coding ag | 26 | Codex, OpenCode | 1 | 434 tok |
| qauth-labs/qauth qauth.dev Post-quantum ready, headless-first identity platform. A developer-friendly alternative to | 26 | Claude Code, Codex, OpenCode | 30 | 1,944 tok |