1,170 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| hyqhyq3/dsh-mcp-manager MCP server manager plugin for DeepSeek Harness: Settings → MCP page, OAuth (PKCE + dynamic | 26 | Codex, OpenCode | 1 | 2,803 tok |
| takiAA/twitter-scraper-mcp Twitter/X MCP server for AI agents: search, timelines, threads and profiles via local twsc | 26 | Codex, OpenCode | 1 | 276 tok |
| VAIBHAVSING/openghost OpenGhost is an Agent Skill for authorized web app penetration testing: Enter lab url past | 25 | Codex, OpenCode | 1 | 1,701 tok |
| allsmog/vuln-scout AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 | 25 | Claude Code, Codex, OpenCode | 2 | 1,307 tok |
| ali-master/audit audit.usestrict.dev An 8-stage AI vulnerability-discovery agent. | 25 | Claude Code, Codex | 2 | — |
| xinxin7/claw-shield The governance layer for AI agents — monitor reasoning, audit tool calls, and secure the l | 25 | Codex, OpenCode | 1 | 2,046 tok |
| IgorWarzocha/opencode-usage-plugin Plugin that displays your OAuth subscription quotas. | 25 | Codex, OpenCode | 1 | 325 tok |
| gtasb/Burp-AI-Analyzer An AI-assisted penetration testing assistant developed with agentscope | 25 | Codex, OpenCode | 1 | 2,357 tok |
| gromhacks/bonsai-ninja 🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compil | 25 | Claude Code, Codex, OpenCode | 2 | 6,225 tok |
| meesii/codex-mcp Codex-MCP for ChatGPT Web | 25 | Codex, OpenCode | 1 | 2,201 tok |
| icoretech/warden-mcp npmjs.com 🔐 Vaultwarden / Bitwarden MCP server for credential-aware AI agents | 25 | Codex, OpenCode | 1 | 223 tok |
| r5rana/agentware Framework that makes your LLM self-aware, loops with self-learning and persistent memory t | 24 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 34 | 4,731 tok |
| wangjianjq/Skill Auto agents | 24 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode | 45 | 8,297 tok |
| RobithYusuf/mcp-stealth-chrome Stealth Chrome MCP server — 100++ tools for AI agents. One-liner Cloudflare Turnstile bypa | 24 | Claude Code, Codex, OpenCode | 2 | 4,147 tok |
| fb0sh/pentester An automated penetration testing framework based on AI agents, strictly following the PTES | 24 | Claude Code, Codex | 58 | — |
| rayline-ai/rayline rayline.ai Open-source local router for coding agents, connecting Claude Code to cloud and local on-d | 24 | Claude Code, Codex, OpenCode | 2 | 961 tok |
| VincentChuWaiChow/vanguard-frontier-agentic Curated marketplace of AI skills, agents, and rules for cloud, zero-trust, and compliance- | 24 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 6,394 tok |
| byadsco/meta-ads-mcp MCP server for Meta Ads (Facebook/Instagram) - agency multi-account, cloud-ready | 24 | Claude Code, Codex, OpenCode | 3 | 5,912 tok |
| verygoodsecurity/vgs-collect-ios verygoodsecurity.com VGS Collect iOS SDK | 23 | Codex, OpenCode | 1 | 13 tok |
| sy159/snowgo A lightweight rapid-development Golang API project built with Gin + Gorm, ready to use out | 23 | Codex, OpenCode | 1 | 1,720 tok |
| ShieldNet-360/secure-vibe SecureVibe — prevention-first security for AI-written code. Signed SKILL.md knowledge that | 23 | Codex, OpenCode | 1 | 1,449 tok |
| kalpmodi/akira Autonomous offensive security agent. Plans engagements, runs recon, chains exploits, and w | 23 | Codex, OpenCode | 1 | 575 tok |
| zhouwei713/WorkBuddy-Dream-Skin Community image-driven skin for Tencent WorkBuddy desktop. External CDP injection, fully r | 23 | Codex, OpenCode | 1 | 826 tok |
| aldegad/safedeps npmjs.com Dependency safety gate for Claude Code & Codex CLI — OSV pre-approval, npm lockfile-closur | 23 | Claude Code, Codex, OpenCode | 2 | 37,362 tok |
| nexus-substrate/nexus-agents nexus-substrate.github.io Governance substrate for your AI coding agents — adversarial review, drift-detected rules, | 23 | Claude Code, Codex, Gemini CLI, OpenCode | 7 | 32,125 tok |
| SkyShannonProver/shannon-prover skyshannonprover.github.io LLM agents that write machine-checked cryptographic proofs in EasyCrypt (arXiv:2607.02847) | 23 | Claude Code, Codex, OpenCode | 4 | 2,765 tok |
| Elnora-AI/elnora-ai-agent-hackathon-starter-kit Run one command, follow the instructions, and get your first AI agents up and running — Cl | 22 | Claude Code, Codex, OpenCode | 3 | 3,892 tok |
| meltedinhex/analyst-ai-pack meltedinhex.com An open agent-skills library for malware analysis, reverse engineering, and threat hunting | 22 | Codex, GitHub Copilot, OpenCode | 2 | 1,536 tok |
| ducnguyen67201/FeatherlaneAI featherlane.ai Real-time guardrail runtime for AI agents. | 22 | Claude Code, Codex, OpenCode | 2 | 4,375 tok |
| fdhhhdjd/Class-Production-AI-App 🏗️ Production-ready AI app structure — RAG pipeline, hybrid search, self-correcting agent | 22 | Claude Code, Codex, OpenCode | 2 | 776 tok |
| mrFlick72/vauthenticator VAuthenticator OpenID Connect/OAuth2.1 Auth server | 22 | Claude Code, Codex, OpenCode | 2 | 207 tok |
| pandysp/openclaw-infra Secure self-hosted OpenClaw deployment on Hetzner Cloud with Tailscale | 22 | Codex, OpenCode | 1 | 8,469 tok |
| fpytloun/intaris Guardrails service for AI agents. Default-deny tool call evaluation with LLM safety analys | 22 | Codex, OpenCode | 1 | 22,724 tok |
| woohyun212/security-skill A collection of AI agent skills for security professionals, by security professionals, and | 22 | Claude Code, Codex, OpenCode | 2 | 1,284 tok |
| Onurlulardan/ForgeStart Production-ready Next.js SaaS starter with Auth.js, Drizzle, PostgreSQL, RBAC, admin UI, i | 22 | Codex, OpenCode | 1 | 2,406 tok |
| Trivo25/code-airlock trivo25.github.io Run Claude Code (or another coding agent) unattended, inside a disposable microVM, with it | 22 | Claude Code, Codex, OpenCode | 2 | 288 tok |
| atlanhq/atlan-python docs.atlan.com Official Python SDK for the Atlan 💙 | 21 | Claude Code, Codex, OpenCode | 6 | 1,222 tok |
| royashbrook/hush royashbrook.com a secret store for ai agents with one rule: the agent never sees the plaintext. get a secr | 21 | Codex, OpenCode | 1 | 410 tok |
| pantheraudits/move-auditor pantheraudits.com Skill for move smart contract security auditing. | 21 | Claude Code, Codex, OpenCode | 2 | 1,607 tok |
| tower/agentic-data-engineering Repository with a skills boilerplate for agentic data engineering workflows | 21 | Claude Code, Codex, OpenCode | 5 | 1,154 tok |
| PandaNePanda/notioncode_mcp t.me MCP that allows you to use top-tier LLM's, such as GPT-5.6 and Fable 5, in any IDE via Not | 21 | Codex, OpenCode | 1 | 553 tok |
| linuxfoundation/lfx-mcp LFX MCP (Model Context Protocol) Server | 21 | Claude Code, Codex, GitHub Copilot, OpenCode | 12 | 11,788 tok |
| docdyhr/simplenote-mcp-server MCP Server for Simplenote integration with Claude Desktop | 21 | Claude Code, Codex, GitHub Copilot, OpenCode | 12 | 3,384 tok |
| aiconnai/agentshield aiconnai.github.io 🛡️ The security firewall for AI agent tools & MCP servers (Claude 5, GPT-5.6, Gemini 3.8, | 21 | Claude Code, Codex, OpenCode | 2 | 7,575 tok |
| databricks-solutions/ai-platform-kit AI-powered Databricks platform engineering — provision workspaces, configure Unity Catalog | 21 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 1,603 tok |
| getmunin/munin getmunin.com The customer platform for the agentic era. MCP-first, open source, self-hostable. | 21 | Claude Code, Codex, OpenCode | 4 | 8,213 tok |
| onmax/nuxt-convex nuxt-convex.onmax.me Nuxt module for Convex | 21 | Codex | 5 | — |
| pierreb-devkit/Node weareopensource.me :computer: Node - Boilerplate Back : Express, Jwt, Mongo, Sequelize | 20 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 2,293 tok |
| yultyyev/better-auth-firebase-auth npmjs.com Use Firebase Authentication (Phone SMS OTP, Google, Email) with Better Auth sessions, orga | 20 | Claude Code, Codex, OpenCode | 2 | 2,443 tok |
| aws-samples/sample-multi-tenant-saas-mcp-server Multi-Tenant remote MCP server with Amazon Cognito and remote client with Amazon Bedrock h | 20 | Codex, OpenCode | 1 | 1,043 tok |