975 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,410Claude Code6,578Data and AI3,695Backend and APIs3,487Languages3,404Planning3,188Git and workflow3,106Code review2,712Memory and context2,351Testing2,325Research2,289DevOps and cloud2,283
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| matthiastjong/shellgate-legacy shellgate.ai Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail. | 15 | Claude Code, Codex, OpenCode | 2 | 2,794 tok |
| prodlint/prodlint prodlint.com Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find ou | 15 | Claude Code, Codex, OpenCode | 2 | 4,355 tok |
| databricks-solutions/ai-platform-kit AI-powered Databricks platform engineering — provision workspaces, configure Unity Catalog | 15 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 1,603 tok |
| icoretech/warden-mcp npmjs.com 🔐 Vaultwarden / Bitwarden MCP server for credential-aware AI agents | 15 | Claude Code, Codex, OpenCode | 2 | 226 tok |
| apache/axis-axis2-c-core axis.apache.org Apache Axis2/C - JSON/REST and SOAP web services framework in C. Runs as an Apache httpd m | 15 | Codex, OpenCode | 1 | 1,947 tok |
| CsabaKovacs/rulesmith Local-first CLI + MCP server that maps repositories and generates evidence-backed AI agent | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 4,962 tok |
| tene-ai/tene tene.sh AI-safe secret manager CLI for Claude Code, Cursor, and other AI agents. Local-first, encr | 15 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,109 tok |
| snowdreamtech/template snowdreamtech.github.io An enterprise-grade, foundational template designed for multi-AI IDE collaboration. This r | 15 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 7 | 2,764 tok |
| hoangsonww/DevVerse-SWE-Blog devverse-swe.vercel.app 🪐 DevVerse CS Blog – A modern, high-performance blog app built with Next.js, Vercel, Supa | 15 | Claude Code, Codex, GitHub Copilot, OpenCode | 17 | 3,839 tok |
| CrowdStrike/fusion-skills crowdstrike.com AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discov | 14 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 3,083 tok |
| grcorsair/corsair grcorsair.com Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Cor | 14 | Codex, OpenCode | 1 | 1,401 tok |
| ZarK/ai-supply-chain-guard Tool-agnostic Agent Skill for dependency supply-chain defense | 14 | Codex, OpenCode | 1 | 298 tok |
| peacprotocol/peac peacprotocol.org Portable signed records for automated interactions. | 14 | Codex, OpenCode | 1 | 1,155 tok |
| joslat/maf-doctor AI-powered toolkit for Microsoft Agent Framework (MAF) migrations — agents, skills, MCP se | 14 | Codex, GitHub Copilot, OpenCode | 5 | 7,516 tok |
| TsuyoshiUshio/buka-samples Sample Project for the buka project | 14 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 2,584 tok |
| hyqhyq3/dsh-mcp-manager MCP server manager plugin for DeepSeek Harness: Settings → MCP page, OAuth (PKCE + dynamic | 14 | Codex, OpenCode | 1 | 1,189 tok |
| byadsco/meta-ads-mcp MCP server for Meta Ads (Facebook/Instagram) - agency multi-account, cloud-ready | 14 | Claude Code, Codex, OpenCode | 3 | 4,558 tok |
| voodootikigod/skills-check skillscheck.ai The missing quality toolkit for Agent Skills | 13 | Claude Code, Codex, OpenCode | 2 | 7,374 tok |
| tigrisdata/mcp-oidc-provider tigrisdata.com Open-sourced mcp-oidc-provider: a minimal, vendor-neutral OIDC layer that sits between MCP | 13 | Claude Code, Codex, OpenCode | 2 | 639 tok |
| ratel-ai/ratel-local MCP server library + ratel-local CLI: expose a Ratel tool catalog as a Model Context Proto | 13 | Claude Code, Codex, OpenCode | 2 | 479 tok |
| sint-ai/sint-protocol sint.gg Open-source runtime security and governance for AI agents, MCP tools, robotics, industrial | 13 | Claude Code, Codex, OpenCode | 2 | 4,746 tok |
| Threat-Vector-Security/guardian-agent Local workstation and network security with ContextCypher diagrams, threat analysis and GR | 13 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,991 tok |
| WingedGuardian/skyrimvr-claude-toolkit AI-assisted Skyrim modding environment for Claude Code. SE/AE/VR — ESP tools, safety hooks | 13 | Claude Code, Codex, OpenCode | 13 | 13,734 tok |
| tarekmo0/HunterStick A persistent context and fieldcraft system for AI-assisted bug bounty hunting. | 13 | Claude Code, Codex, OpenCode | 37 | 7,495 tok |
| ahmadulhoq/agentskel The skeleton for agentic development — persistent memory, shared standards, and structured | 13 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 7 | 5,625 tok |
| ch1109/portable-agent-skills Three portable Agent Skills for research, repository deployment, and pre-install safety re | 12 | Codex, OpenCode | 1 | 143 tok |
| vaaraio/vaara vaara.io Accountable Autonomy: open-source evidence layer that gates every AI agent tool call again | 12 | Codex, OpenCode | 1 | 1,065 tok |
| samibs/skillfoundry skillfoundry.work AI engineering framework with quality gates, persistent memory, and multi-platform support | 12 | Claude Code, Codex, GitHub Copilot, OpenCode | 8 | 9,508 tok |
| CES-Ltd/TitanClip ces-ltd.github.io AI Company Orchestration Platform — Deploy governed teams of autonomous AI agents with Run | 12 | Codex, OpenCode | 1 | 216 tok |
| code-yeongyu/codex-rules Codex plugin that injects project rule files into model context through lifecycle hooks. | 12 | Claude Code, Codex, OpenCode | 1 | 377 tok |
| TimothyVang/verdict-dfir VERDICT — a DFIR agent (Claude Code as the engine) that produces a signed, offline-verifia | 12 | Claude Code, Codex, OpenCode | 6 | 8,726 tok |
| andrasfe/vulnicheck Python vulnerability scanner & MCP security toolkit. Real-time dependency checking via OSV | 11 | Claude Code, Codex, OpenCode | 2 | 6,751 tok |
| mishahanin/heading-os mishahanin.github.io The operating system an executive runs their company from — research, communications, CRM, | 11 | Claude Code, Codex, OpenCode | 5 | 6,671 tok |
| tse-wei-chen/hs-sql-agent sql-agent.net .NET SQL Agent MCP server featuring raw SQL input, strict AST validation, and an embedded | 11 | Codex, OpenCode | 1 | 855 tok |
| jeonghwanko/onesub npmjs.com Server-side receipt validation for react-native-iap. Apple StoreKit 2 + Google Play Billin | 11 | Claude Code, Codex, OpenCode | 3 | 7,623 tok |
| NERVsystems/cotlib cotlib is a secure, high-performance Go library for parsing, validating, and generating Cu | 11 | Claude Code, Codex, OpenCode | 2 | 1,170 tok |
| sane-apps/SaneProcess saneapps.com Workflow guardrails for coding agents and LLM-assisted development: AGENTS.md, native hook | 11 | Claude Code, Codex, GitHub Copilot, OpenCode | 9 | 4,998 tok |
| enforra/enforra enforra.com Open source action governance SDK for AI agent tool calls. | 11 | Claude Code, Codex, OpenCode | 2 | 3,090 tok |
| dfirtnt/Huntable-CTI-Studio dfirtnt.wordpress.com Huntable CTI Studio is an AI-assisted cyber threat intelligence workbench that turns open- | 11 | Claude Code, Codex, Cursor, OpenCode | 32 | 4,338 tok |
| MingyiSecLab/Mingyi-Atlas Harness-driven terminal AI agent for authorized security assessment, with TUI, headless | 11 | Claude Code, Codex, OpenCode | 2 | 5,990 tok |
| ruah-dev/ruah-orch | 11 | Claude Code, Codex, GitHub Copilot, OpenCode | 9 | 508 tok |
| ferrants/bearclaw BearClaw - AI agent framework with defense-in-depth security, multi-agent orchestration, a | 11 | Claude Code, Codex, OpenCode | 2 | 180 tok |
| vietanhdev/bulwark bulwark.nrl.ai A Linux host security scanner with a native CLI and desktop GUI — SSH/kernel/systemd harde | 11 | Claude Code, Codex, OpenCode | 2 | 13,640 tok |
| xrhstosmour/arch-tuner Arch Linux Server Deployment, Hardening, and Tuning | 11 | Codex, OpenCode | 1 | 2,480 tok |
| project-kessel/insights-rbac Role based access control API service | 11 | Claude Code, Codex, Cursor, OpenCode | 8 | 2,524 tok |
| az-coder-123/firebase-cloud-messenger An open-source Flutter application designed to streamline FCM testing using the modern HTT | 11 | Codex, OpenCode | 1 | 407 tok |
| ArdaTX/Cybersec-Reporting-Engine Enterprise-Grade Cybersecurity Reporting Platform — Automated report generation for pentes | 11 | Claude Code, Codex, OpenCode | 12 | 1,086 tok |
| klodr/gmail-mcp Gmail MCP server — scope-gated tools (readonly / send / modify), path jails for attachment | 11 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 2,791 tok |
| R00T-Kim/SCOUT r00t-kim.github.io Deterministic firmware-to-exploit evidence engine. Drop a firmware blob, get hash-anchored | 11 | Claude Code, Codex, OpenCode | 2 | 6,515 tok |
| m18h/kanea m18h.github.io Container orchestration in one binary - containerd, its own eBPF datapath, Let's Encrypt T | 11 | Claude Code, Codex, OpenCode | 2 | 4,826 tok |