1,117 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| rapid7/rapid7-bulk-export-mcp Rapid7 Bulk Export MCP - AI-powered analysis for Rapid7 Command Platform data using MCP (M | 37 | Codex, Kiro, OpenCode | 4 | 4,303 tok |
| GSA-TTS/agentic-coding-playbook Practical, tool-agnostic playbook for federal employees building software with AI coding a | 37 | Claude Code, Codex, OpenCode | 13 | 12,245 tok |
| KhaledSaeed18/node-express-boilerplate Production-ready Express + TypeScript backend boilerplate with clean layered architecture, | 36 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 6 | 1,536 tok |
| chohra-med/expo_boilerplate aimobilelauncher.com AI-first React Native and Expo boilerplate. Feature-first architecture, TypeScript, auth, | 36 | Claude Code, Codex, OpenCode | 2 | 1,127 tok |
| Infisical/ai-skills AI skills and MCP connection for Infisical -- Stop your AI from hallucinating about Infisi | 36 | Codex, OpenCode | 1 | 2,391 tok |
| JeongJaeSoon/agent-guard Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and | 36 | Codex, OpenCode | 1 | 235 tok |
| ali-ulu/huqan huqan.com Local-first verification layer for AI agents: evidence, provenance, policy gates, human ap | 36 | Codex, GitHub Copilot, OpenCode | 5 | 3,605 tok |
| kupzed/catatz catatz.vercel.app A personal finance management app powered by Next.js and Supabase. Key features include tr | 34 | Claude Code, Codex, Gemini CLI, OpenCode | 27 | 3,672 tok |
| mishrasanjeev/grantex grantex.dev grantex is the identity, authorization, and audit infrastructure for AI agents — the "OAut | 33 | Claude Code, Codex, OpenCode | 2 | 2,932 tok |
| girijashankarj/cursor-handbook Open-source rules engine for Cursor IDE — 110 rules, agents, skills, commands that give AI | 33 | Claude Code, Codex, OpenCode | 2 | 933 tok |
| 10Legs/freelance-developer-harness A Claude Code operating system for running a structured agency team. 25 specialized roles | 33 | Claude Code, Codex, OpenCode | 5 | 5,267 tok |
| EndlessBlueWJL/schengen-visa-guide Schengen visa AI Agent skill — customized checklists by applicant profile, cross-session m | 32 | Codex, OpenCode | 1 | 274 tok |
| mehmetnadir/cdpilot cdpilot.ndr.ist Browser automation CLI on raw CDP — no Puppeteer, Playwright or Selenium, 0 npm dependenci | 32 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 3,615 tok |
| sseshachala/conductai conductai.ai Runtime governance for AI agents. Allow, warn, or block every model and tool call before i | 32 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 11 | 5,722 tok |
| msaad00/agent-bom msaad00.github.io Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence m | 31 | Claude Code, Codex, OpenCode | 2 | 417 tok |
| kissrosecicd-hub/agents-evolution [Legacy] Optimized AGENTS.md system instructions for AI CLI/IDE agents. Token-efficient (C | 31 | Claude Code, Codex, OpenCode | 41 | 5,881 tok |
| krivoox/agent-stack-template Agent-first multi-tenant Next.js template (rules, sub-agents, skills, Better Auth, Prisma) | 31 | Claude Code, Codex, OpenCode | 2 | 2,203 tok |
| MythicAgents/sage Sage is a virtual Mythic agent that that uses an AI agentic system to operate Mythic and M | 31 | Claude Code, Codex, OpenCode | 6 | 2,501 tok |
| anthonyhaussman/opencode-agy-auth npmjs.com Antigravity auth plugin for opencode | 31 | Codex, OpenCode | 1 | 4,665 tok |
| rsdouglas/janee janee.io Secrets management for AI agents via MCP • @janeesecure | 30 | Claude Code, Codex, OpenCode | 2 | 506 tok |
| badbread/crumbvms crumbvms.com A self-hosted, operator-grade NVR for your own security cameras: recording, motion, licens | 30 | Claude Code, Codex, OpenCode | 2 | 2,361 tok |
| luisfurquim/wings WINGS is an open-source, simple golang-based platform for front-end web application develo | 29 | Claude Code, Codex, GitHub Copilot, OpenCode | 9 | 2,431 tok |
| nirholas/lyra-intel nirholas.github.io Lyra Intel is an intelligence platform designed to analyze repositories of any size - from | 29 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 807 tok |
| IgorGanapolsky/ThumbGate thumbgate.ai ThumbGate Pre-Action Checks self-improve from ranked lessons and repeated failures, hard-b | 29 | Claude Code, Codex, Gemini CLI, OpenCode | 75 | 13,645 tok |
| Liberty91LTD/cti-skills liberty91.com Cyber Threat Intelligence Skills for each stage of the CTI Lifecycle. | 29 | Claude Code, Codex, OpenCode | 4 | 2,621 tok |
| CrowdStrike/fusion-skills crowdstrike.com AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discov | 28 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,463 tok |
| barvhaim/HoneyMCP A Deception Security Layer for MCP Servers. It injects "ghost tools" (fake security-sensit | 28 | Claude Code, Codex, OpenCode | 2 | 4,918 tok |
| maddexritter-rgb/vibe-editing Raw footage in, finished captioned vertical clips out — with one command. A Claude Code pl | 28 | Claude Code, Codex, OpenCode | 2 | 1,295 tok |
| Raftersecurity/rafter-cli rafter.so Multi-language CLI for Rafter — the security toolkit built for AI coding agents and the de | 28 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,033 tok |
| nik1t7n/context-firewall Local-first context firewall for coding agents | 27 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 358 tok |
| fiberplane/mcp-gateway Gateway for inspecting and auditing your MCP servers | 27 | Claude Code, Codex, OpenCode | 2 | 5,849 tok |
| gaspareduard/Omada-mcp Security-first MCP server for TP-Link Omada, with a stdio-first runtime, capability-gated | 27 | Claude Code, Codex, OpenCode | 3 | 2,713 tok |
| cardstack/boxel A new approach to building composable software, from Cardstack. | 27 | Claude Code, Codex, OpenCode | 64 | 7,540 tok |
| anasfik/FlutterGuard Flutter APK/AAB security SKILL.md for OpenClaw, Codex, Claude Code, and other AI coding ag | 26 | Codex, OpenCode | 1 | 434 tok |
| qauth-labs/qauth qauth.dev Post-quantum ready, headless-first identity platform. A developer-friendly alternative to | 26 | Claude Code, Codex, OpenCode | 30 | 1,944 tok |
| icoretech/warden-mcp npmjs.com 🔐 Vaultwarden / Bitwarden MCP server for credential-aware AI agents | 26 | Codex, OpenCode | 1 | 223 tok |
| hyqhyq3/dsh-mcp-manager MCP server manager plugin for DeepSeek Harness: Settings → MCP page, OAuth (PKCE + dynamic | 26 | Codex, OpenCode | 1 | 2,803 tok |
| takiAA/twitter-scraper-mcp Twitter/X MCP server for AI agents: search, timelines, threads and profiles via local twsc | 26 | Codex, OpenCode | 1 | 276 tok |
| VAIBHAVSING/openghost OpenGhost is an Agent Skill for authorized web app penetration testing: Enter lab url past | 25 | Codex, OpenCode | 1 | 1,701 tok |
| allsmog/vuln-scout AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 | 25 | Claude Code, Codex, OpenCode | 2 | 1,307 tok |
| xinxin7/claw-shield The governance layer for AI agents — monitor reasoning, audit tool calls, and secure the l | 25 | Codex, OpenCode | 1 | 2,046 tok |
| IgorWarzocha/opencode-usage-plugin Plugin that displays your OAuth subscription quotas. | 25 | Codex, OpenCode | 1 | 325 tok |
| gtasb/Burp-AI-Analyzer An AI-assisted penetration testing assistant developed with agentscope | 25 | Codex, OpenCode | 1 | 2,357 tok |
| gromhacks/bonsai-ninja 🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compil | 25 | Claude Code, Codex, OpenCode | 2 | 6,225 tok |
| meesii/codex-mcp Codex-MCP for ChatGPT Web | 25 | Codex, OpenCode | 1 | 2,201 tok |
| byadsco/meta-ads-mcp MCP server for Meta Ads (Facebook/Instagram) - agency multi-account, cloud-ready | 25 | Claude Code, Codex, OpenCode | 3 | 5,912 tok |
| r5rana/agentware Framework that makes your LLM self-aware, loops with self-learning and persistent memory t | 24 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 34 | 4,731 tok |
| wangjianjq/Skill Auto agents | 24 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode | 45 | 8,297 tok |
| RobithYusuf/mcp-stealth-chrome Stealth Chrome MCP server — 100++ tools for AI agents. One-liner Cloudflare Turnstile bypa | 24 | Claude Code, Codex, OpenCode | 2 | 4,147 tok |
| rayline-ai/rayline rayline.ai Open-source local router for coding agents, connecting Claude Code to cloud and local on-d | 24 | Claude Code, Codex, OpenCode | 2 | 961 tok |