1,026 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,374Claude Code6,573Data and AI3,706Backend and APIs3,486Languages3,398Planning3,181Git and workflow3,100Code review2,701Memory and context2,354Testing2,311Research2,292DevOps and cloud2,282
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| safe-agentic-world/nomos Secure every action your AI agents take (Claude Code, Codex, MCP). Blocks secret access, g | 18 | Claude Code, Codex, OpenCode | 2 | 2,211 tok |
| pluginslab/wp-agentic-kit pluginslab.com Starter kit for agentic WordPress development. CLAUDE.md/AGENTS.md templates, the wordpres | 18 | Claude Code, Codex, OpenCode | 8 | 3,997 tok |
| aiconnai/agentshield aiconnai.github.io 🛡️ The security firewall for AI agent tools & MCP servers (Claude, GPT-5.6, Gemini 3.7, A | 18 | Claude Code, Codex, OpenCode | 2 | 7,115 tok |
| ssdeanx/secure-rag-multi-agent deanmachines.com Secure Retrieval-Augmented Generation (RAG) with role-based access control using Mastra AI | 18 | Codex, GitHub Copilot, OpenCode | 3 | 15,972 tok |
| staticroostermedia-arch/engram glama.ai Geometric agent memory for Agents: 8-tool lean contract, harness injection at wake, sessio | 18 | Claude Code, Codex, OpenCode | 2 | 3,188 tok |
| nexus-substrate/nexus-agents nexus-substrate.github.io Governance substrate for your AI coding agents — adversarial review, drift-detected rules, | 18 | Claude Code, Codex, Gemini CLI, OpenCode | 7 | 26,414 tok |
| snyk-labs/toxicskills-goof ToxicSkills - malicious agent skills in openclaw / clawhub / agent supply chain | 18 | Claude Code, Codex, Gemini CLI | 6 | — |
| kingggg5/shipproof shipproof-site.sjet2744.chatgpt.site Evidence-first Codex, Claude plugin for bugs, security, and 10k-to-1M-user scale readiness | 18 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,055 tok |
| ajipurn/fida fida.my.id a local-first secret leak prevention layer for AI coding agents | 18 | Codex, OpenCode | 1 | 129 tok |
| Liberty91LTD/cti-skills liberty91.com Cyber Threat Intelligence Skills for each stage of the CTI Lifecycle. | 17 | Claude Code, Codex, OpenCode | 4 | 2,048 tok |
| clouisle/Clouisle clouisle.asia Next-Generation Multi-Agent Collaboration Platform and Workflow Engine. Build and orchestr | 17 | Claude Code, Codex, OpenCode | 2 | 529 tok |
| icefrag/nbl-superpowers The agent harness performance optimization system. Skills, instincts, memory, security, an | 17 | Codex, OpenCode | 1 | 57 tok |
| AppliedIR/sift-mcp appliedir.github.io Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal | 17 | Codex, OpenCode | 1 | 2,318 tok |
| XZXZZX-Ai/bilibili-mcp Bilibili MCP tool A Bilibili MCP server | 17 | Claude Code, Codex, OpenCode | 14 | 1,197 tok |
| Eilodon/CALM npmjs.com A live, graph-verified map of your codebase for AI coding agents — real call graphs, compi | 16 | Claude Code, Codex, OpenCode | 7 | 7,514 tok |
| appsec-foundry/appsec-advisor Claude Code plugin for code-anchored threat modeling and security architecture review. | 16 | Claude Code, Codex, OpenCode | 4 | 1,845 tok |
| ashlrai/phantom-secrets phm.dev Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secret | 16 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 5,964 tok |
| authprobe/authprobe authprobe.com authprobe pinpoints MCP OAuth failures | 16 | Codex, OpenCode | 1 | 1,121 tok |
| renatobardi/hapai renatobardi.github.io Deterministic guardrails for AI coding assistants. Enforce rules via Bash hooks before exe | 16 | Claude Code, Codex, OpenCode | 2 | 13,646 tok |
| oscal-compass-lab/compliance-trestle-skills Agent-portable Compliance Trestle and OSCAL engineering toolkit: convert legacy SSPs to OS | 16 | Claude Code, Codex, Gemini CLI, OpenCode | 2 | 1,658 tok |
| iOSDevSK/mcp-for-woocommerce mcpforwoocommerce.com WooCommerce MCP Server — WordPress community plugin implementing the Model Context Protoco | 15 | Codex, OpenCode | 1 | 1,039 tok |
| matthiastjong/shellgate-legacy shellgate.ai Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail. | 15 | Claude Code, Codex, OpenCode | 2 | 2,794 tok |
| prodlint/prodlint prodlint.com Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find ou | 15 | Claude Code, Codex, OpenCode | 2 | 4,355 tok |
| whitequeen306/code-cortex-loop One-command AI code quality pipeline: review, security, tests, performance, simplify & cle | 15 | Codex, OpenCode | 1 | 1,601 tok |
| databricks-solutions/ai-platform-kit AI-powered Databricks platform engineering — provision workspaces, configure Unity Catalog | 15 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 1,603 tok |
| alifanov/scopegate scopegate.dev AI Access Proxy Layer — granular permission gateway for AI agents. Connect services, defin | 15 | Claude Code, Codex | 4 | 7,477 tok |
| apache/axis-axis2-c-core axis.apache.org Apache Axis2/C - JSON/REST and SOAP web services framework in C. Runs as an Apache httpd m | 15 | Codex, OpenCode | 1 | 1,947 tok |
| CsabaKovacs/rulesmith Local-first CLI + MCP server that maps repositories and generates evidence-backed AI agent | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 4,962 tok |
| tene-ai/tene tene.sh AI-safe secret manager CLI for Claude Code, Cursor, and other AI agents. Local-first, encr | 15 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,109 tok |
| snowdreamtech/template snowdreamtech.github.io An enterprise-grade, foundational template designed for multi-AI IDE collaboration. This r | 15 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 7 | 2,764 tok |
| hoangsonww/DevVerse-SWE-Blog devverse-swe.vercel.app 🪐 DevVerse CS Blog – A modern, high-performance blog app built with Next.js, Vercel, Supa | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 3,839 tok |
| CrowdStrike/fusion-skills crowdstrike.com AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discov | 14 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,083 tok |
| icoretech/warden-mcp npmjs.com 🔐 Vaultwarden / Bitwarden MCP server for credential-aware AI agents | 14 | Claude Code, Codex, OpenCode | 2 | 226 tok |
| grcorsair/corsair grcorsair.com Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Cor | 14 | Codex, OpenCode | 1 | 1,401 tok |
| ZarK/ai-supply-chain-guard Tool-agnostic Agent Skill for dependency supply-chain defense | 14 | Codex, OpenCode | 1 | 298 tok |
| peacprotocol/peac peacprotocol.org Portable signed records for automated interactions. | 14 | Codex, OpenCode | 1 | 1,155 tok |
| joslat/maf-doctor AI-powered toolkit for Microsoft Agent Framework (MAF) migrations — agents, skills, MCP se | 14 | Codex, GitHub Copilot, OpenCode | 5 | 7,516 tok |
| TsuyoshiUshio/buka-samples Sample Project for the buka project | 14 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 2,584 tok |
| byadsco/meta-ads-mcp MCP server for Meta Ads (Facebook/Instagram) - agency multi-account, cloud-ready | 14 | Claude Code, Codex, OpenCode | 3 | 4,558 tok |
| voodootikigod/skills-check skillscheck.ai The missing quality toolkit for Agent Skills | 13 | Claude Code, Codex, OpenCode | 2 | 7,374 tok |
| tigrisdata/mcp-oidc-provider tigrisdata.com Open-sourced mcp-oidc-provider: a minimal, vendor-neutral OIDC layer that sits between MCP | 13 | Claude Code, Codex, OpenCode | 2 | 639 tok |
| ratel-ai/ratel-local MCP server library + ratel-local CLI: expose a Ratel tool catalog as a Model Context Proto | 13 | Claude Code, Codex, OpenCode | 2 | 479 tok |
| sint-ai/sint-protocol sint.gg Open-source runtime security and governance for AI agents, MCP tools, robotics, industrial | 13 | Claude Code, Codex, OpenCode | 2 | 4,746 tok |
| hyqhyq3/dsh-mcp-manager MCP server manager plugin for DeepSeek Harness: Settings → MCP page, OAuth (PKCE + dynamic | 13 | Codex, OpenCode | 1 | 1,189 tok |
| tarekmo0/HunterStick A persistent context and fieldcraft system for AI-assisted bug bounty hunting. | 13 | Claude Code, Codex, OpenCode | 37 | 7,495 tok |
| ahmadulhoq/agentskel The skeleton for agentic development — persistent memory, shared standards, and structured | 13 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 7 | 5,625 tok |
| ch1109/portable-agent-skills Three portable Agent Skills for research, repository deployment, and pre-install safety re | 12 | Codex, OpenCode | 1 | 143 tok |
| ravikant1918/sharepoint-mcp Production-grade MCP Server for Microsoft SharePoint — give your AI agent (Claude, Cursor, | 12 | Claude Code, Codex | 5 | — |
| vaaraio/vaara vaara.io Accountable Autonomy: open-source evidence layer that gates every AI agent tool call again | 12 | Codex, OpenCode | 1 | 1,065 tok |
| samibs/skillfoundry skillfoundry.work AI engineering framework with quality gates, persistent memory, and multi-platform support | 12 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 9,508 tok |