1,117 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| VincentChuWaiChow/vanguard-frontier-agentic Curated marketplace of AI skills, agents, and rules for cloud, zero-trust, and compliance- | 24 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode | 4 | 6,394 tok |
| aldegad/safedeps npmjs.com Dependency safety gate for Claude Code & Codex CLI — OSV pre-approval, npm lockfile-closur | 24 | Claude Code, Codex, OpenCode | 2 | 37,362 tok |
| verygoodsecurity/vgs-collect-ios verygoodsecurity.com VGS Collect iOS SDK | 23 | Codex, OpenCode | 1 | 13 tok |
| sy159/snowgo A lightweight rapid-development Golang API project built with Gin + Gorm, ready to use out | 23 | Codex, OpenCode | 1 | 1,720 tok |
| ShieldNet-360/secure-vibe SecureVibe — prevention-first security for AI-written code. Signed SKILL.md knowledge that | 23 | Codex, OpenCode | 1 | 1,449 tok |
| kalpmodi/akira Autonomous offensive security agent. Plans engagements, runs recon, chains exploits, and w | 23 | Codex, OpenCode | 1 | 575 tok |
| zhouwei713/WorkBuddy-Dream-Skin Community image-driven skin for Tencent WorkBuddy desktop. External CDP injection, fully r | 23 | Codex, OpenCode | 1 | 826 tok |
| nexus-substrate/nexus-agents nexus-substrate.github.io Governance substrate for your AI coding agents — adversarial review, drift-detected rules, | 23 | Claude Code, Codex, Gemini CLI, OpenCode | 7 | 32,125 tok |
| SkyShannonProver/shannon-prover skyshannonprover.github.io LLM agents that write machine-checked cryptographic proofs in EasyCrypt (arXiv:2607.02847) | 23 | Claude Code, Codex, OpenCode | 4 | 2,765 tok |
| Elnora-AI/elnora-ai-agent-hackathon-starter-kit Run one command, follow the instructions, and get your first AI agents up and running — Cl | 22 | Claude Code, Codex, OpenCode | 3 | 3,892 tok |
| meltedinhex/analyst-ai-pack meltedinhex.com An open agent-skills library for malware analysis, reverse engineering, and threat hunting | 22 | Codex, GitHub Copilot, OpenCode | 2 | 1,536 tok |
| ducnguyen67201/FeatherlaneAI featherlane.ai Real-time guardrail runtime for AI agents. | 22 | Claude Code, Codex, OpenCode | 2 | 4,375 tok |
| fdhhhdjd/Class-Production-AI-App 🏗️ Production-ready AI app structure — RAG pipeline, hybrid search, self-correcting agent | 22 | Claude Code, Codex, OpenCode | 2 | 776 tok |
| mrFlick72/vauthenticator VAuthenticator OpenID Connect/OAuth2.1 Auth server | 22 | Claude Code, Codex, OpenCode | 2 | 207 tok |
| pandysp/openclaw-infra Secure self-hosted OpenClaw deployment on Hetzner Cloud with Tailscale | 22 | Codex, OpenCode | 1 | 8,469 tok |
| fpytloun/intaris Guardrails service for AI agents. Default-deny tool call evaluation with LLM safety analys | 22 | Codex, OpenCode | 1 | 22,724 tok |
| woohyun212/security-skill A collection of AI agent skills for security professionals, by security professionals, and | 22 | Claude Code, Codex, OpenCode | 2 | 1,284 tok |
| Onurlulardan/ForgeStart Production-ready Next.js SaaS starter with Auth.js, Drizzle, PostgreSQL, RBAC, admin UI, i | 22 | Codex, OpenCode | 1 | 2,406 tok |
| Trivo25/code-airlock trivo25.github.io Run Claude Code (or another coding agent) unattended, inside a disposable microVM, with it | 22 | Claude Code, Codex, OpenCode | 2 | 288 tok |
| atlanhq/atlan-python docs.atlan.com Official Python SDK for the Atlan 💙 | 21 | Claude Code, Codex, OpenCode | 6 | 1,222 tok |
| royashbrook/hush royashbrook.com a secret store for ai agents with one rule: the agent never sees the plaintext. get a secr | 21 | Codex, OpenCode | 1 | 410 tok |
| pantheraudits/move-auditor pantheraudits.com Skill for move smart contract security auditing. | 21 | Claude Code, Codex, OpenCode | 2 | 1,607 tok |
| tower/agentic-data-engineering Repository with a skills boilerplate for agentic data engineering workflows | 21 | Claude Code, Codex, OpenCode | 5 | 1,154 tok |
| PandaNePanda/notioncode_mcp t.me MCP that allows you to use top-tier LLM's, such as GPT-5.6 and Fable 5, in any IDE via Not | 21 | Codex, OpenCode | 1 | 553 tok |
| linuxfoundation/lfx-mcp LFX MCP (Model Context Protocol) Server | 21 | Claude Code, Codex, GitHub Copilot, OpenCode | 12 | 11,788 tok |
| docdyhr/simplenote-mcp-server MCP Server for Simplenote integration with Claude Desktop | 21 | Claude Code, Codex, GitHub Copilot, OpenCode | 12 | 3,384 tok |
| aiconnai/agentshield aiconnai.github.io 🛡️ The security firewall for AI agent tools & MCP servers (Claude 5, GPT-5.6, Gemini 3.8, | 21 | Claude Code, Codex, OpenCode | 2 | 7,575 tok |
| databricks-solutions/ai-platform-kit AI-powered Databricks platform engineering — provision workspaces, configure Unity Catalog | 21 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 1,603 tok |
| getmunin/munin getmunin.com The customer platform for the agentic era. MCP-first, open source, self-hostable. | 21 | Claude Code, Codex, OpenCode | 4 | 8,213 tok |
| pierreb-devkit/Node weareopensource.me :computer: Node - Boilerplate Back : Express, Jwt, Mongo, Sequelize | 20 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 2,293 tok |
| yultyyev/better-auth-firebase-auth npmjs.com Use Firebase Authentication (Phone SMS OTP, Google, Email) with Better Auth sessions, orga | 20 | Claude Code, Codex, OpenCode | 2 | 2,443 tok |
| aws-samples/sample-multi-tenant-saas-mcp-server Multi-Tenant remote MCP server with Amazon Cognito and remote client with Amazon Bedrock h | 20 | Codex, OpenCode | 1 | 1,043 tok |
| pluginslab/wp-agentic-kit pluginslab.com Starter kit for agentic WordPress development. CLAUDE.md/AGENTS.md templates, the wordpres | 20 | Claude Code, Codex, OpenCode | 8 | 3,997 tok |
| 0xwi11iam/Suijin Suijin is an open-source fully autonomous red teaming / web app pentesting framework for A | 20 | Codex, OpenCode | 1 | 887 tok |
| Bugb-Technologies/guardlink guardlink.bugb.io AI-maintained security annotations for code. Continuous threat modeling, enforced in CI. | 19 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 3,361 tok |
| gleanwork/mcp-server-tester Playwright-based testing and eval framework for MCP servers with LLM-as-a-judge | 19 | Claude Code, Codex, OpenCode | 3 | 7,253 tok |
| safe-agentic-world/nomos Deny-wins policy hook for Claude Code and Codex. Checks every shell, file, and fetch call | 19 | Claude Code, Codex, OpenCode | 2 | 2,832 tok |
| ssdeanx/secure-rag-multi-agent deanmachines.com Secure Retrieval-Augmented Generation (RAG) with role-based access control using Mastra AI | 19 | Codex, GitHub Copilot, OpenCode | 3 | 15,972 tok |
| staticroostermedia-arch/engram glama.ai Geometric agent memory for Agents: 8-tool lean contract, harness injection at wake, sessio | 19 | Claude Code, Codex, OpenCode | 2 | 3,188 tok |
| kingggg5/shipproof shipproof-site.sjet2744.chatgpt.site Evidence-first Codex, Claude plugin for bugs, security, and 10k-to-1M-user scale readiness | 19 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 1,055 tok |
| clouisle/Clouisle clouisle.asia Next-Generation Multi-Agent Collaboration Platform and Workflow Engine. Build and orchestr | 19 | Claude Code, Codex, OpenCode | 2 | 1,017 tok |
| AppliedIR/sift-mcp appliedir.github.io Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal | 19 | Codex, OpenCode | 1 | 2,528 tok |
| open-mcp-ai/termcp Not only an MCP that lets AI act like a human at the terminal — also a cross-platform AI-N | 19 | Claude Code, Codex, OpenCode | 2 | 1,100 tok |
| spences10/mcp-turso-cloud 🗂️ A Model Context Protocol (MCP) server that provides integration with Turso databases f | 18 | Claude Code, Codex, OpenCode | 2 | 259 tok |
| ajipurn/fida fida.my.id a local-first secret leak prevention layer for AI coding agents | 18 | Codex, OpenCode | 1 | 129 tok |
| ashlrai/phantom-secrets phm.dev Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secret | 18 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 6,798 tok |
| ZarK/ai-supply-chain-guard Tool-agnostic Agent Skill for dependency supply-chain defense | 18 | Codex, OpenCode | 1 | 298 tok |
| mondoohq/skillcheck skillcheck.run Scan your machine for malicious AI agent skills — supports Claude Code, OpenAI Codex, and | 18 | Codex, OpenCode | 1 | 528 tok |
| adcontextprotocol/adcp-client adcontextprotocol.github.io A Typescript SDK for the AdCP protocol (client and server) | 18 | Claude Code, Codex, GitHub Copilot, OpenCode | 37 | 12,553 tok |
| seekskyworld/cloud-agent | 18 | Codex, OpenCode | 1 | 938 tok |