1,170 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| affaan-m/ECC ecc.tools The agent harness performance optimization system. Skills, instincts, memory, security, an | 289,862 | Claude Code, Codex, GitHub Copilot, Kiro, OpenCode | 25 | 13,792 tok |
| usestrix/strix strix.ai Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. | 72,157 | Codex, OpenCode | 1 | 1,861 tok |
| danny-avila/LibreChat librechat.ai Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Re | 46,271 | Claude Code, Codex, OpenCode | 2 | 6,783 tok |
| colinhacks/zod zod.dev TypeScript-first schema validation with static type inference | 44,202 | Claude Code, Codex, Cursor, OpenCode | 5 | 5,141 tok |
| zhaoxuya520/reverse-skill Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack | 43,480 | Claude Code, Codex, OpenCode | 2 | 1,295 tok |
| rapid7/metasploit-framework metasploit.com Metasploit Framework | 39,242 | Codex, Kiro, OpenCode | 2 | 6,962 tok |
| rustfs/rustfs rustfs.com RustFS is an open-source, S3-compatible high-performance object storage system supporting | 35,418 | Claude Code, Codex, GitHub Copilot, OpenCode | 10 | 2,421 tok |
| mukul975/Anthropic-Cybersecurity-Skills mahipal.engineer 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, | 35,066 | Codex, GitHub Copilot, OpenCode | 2 | 5,015 tok |
| OWASP/CheatSheetSeries cheatsheetseries.owasp.org The OWASP Cheat Sheet Series was created to provide a concise collection of high value inf | 33,751 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 4,457 tok |
| activepieces/activepieces activepieces.com AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automati | 25,237 | Claude Code, Codex, OpenCode | 23 | 10,264 tok |
| semgrep/semgrep semgrep.dev Lightweight static analysis for many languages. Find bug variants with patterns that look | 17,293 | Claude Code, Codex, OpenCode | 2 | 2,125 tok |
| xerj-org/xerj xerj.org Local-first search engine and MCP server for AI agents. One Rust binary indexes code, docs | 16,857 | Codex, OpenCode | 1 | 6,329 tok |
| prowler-cloud/prowler prowler.com This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely use | 15,100 | Claude Code, Codex, OpenCode | 2 | 2,928 tok |
| analysis-tools-dev/static-analysis analysis-tools.dev ⚙️ A curated list of static analysis (SAST) tools and linters for all programming language | 14,856 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 5 | 515 tok |
| TencentCloud/CubeSandbox cubesandbox.com Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents. | 13,045 | Claude Code, Codex, OpenCode | 11 | 232 tok |
| blackboardsh/electrobun blackboard.sh Build ultra fast, tiny, and cross-platform desktop apps with TypeScript, Zig, Rust, Go, or | 12,970 | Claude Code, Codex | 2 | 371 tok |
| data-privacy-stack/presidio presidio.dataprivacystack.org An open-source framework for detecting, redacting, masking, and anonymizing sensitive data | 11,528 | Claude Code, Codex, GitHub Copilot, OpenCode | 5 | 6,710 tok |
| NVIDIA/garak discord.gg the LLM vulnerability scanner | 9,717 | Codex, OpenCode | 1 | 1,415 tok |
| backnotprop/plannotator plannotator.ai Annotate and review coding agent plans and code diffs visually, share with your team, send | 9,683 | Claude Code, Codex, OpenCode | 5 | 1,197 tok |
| kunchenguid/no-mistakes kunchenguid.github.io git push no-mistakes | 8,979 | Claude Code, Codex, OpenCode | 17 | 8,250 tok |
| zeek/zeek zeek.org Zeek is a powerful network analysis framework that is much different from the typical IDS | 8,140 | Claude Code, Codex, OpenCode | 2 | 823 tok |
| trailofbits/skills Trail of Bits skills for security research, vulnerability detection, and audit workflows | 7,824 | Claude Code, Codex, OpenCode | 2 | 4,952 tok |
| Tencent/AI-Infra-Guard tencent.github.io A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, M | 7,117 | Claude Code, Codex, OpenCode | 2 | 2,177 tok |
| j3ssie/osmedeus osmedeus.org A Modern Orchestration Engine for Security | 6,624 | Claude Code, Codex, OpenCode | 2 | 9,475 tok |
| microsoft/agent-governance-toolkit AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxin | 6,477 | Codex, GitHub Copilot, OpenCode | 2 | 7,605 tok |
| Q00/ouroboros ouroboros.page Agent OS: the agent gets smarter on its own. We just hold the line: Interview-gated, stage | 6,279 | Claude Code, Codex, OpenCode | 8 | 4,047 tok |
| FlorianBruniaux/claude-code-ultimate-guide cc.bruniaux.com The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, q | 6,257 | Claude Code, Codex, GitHub Copilot, OpenCode | 10 | 6,437 tok |
| Awarexone/Agentic-Bug-Hunter awarexone.com AI-powered bug bounty hunting toolkit that works with or without subscription. | 5,422 | Claude Code, Codex, OpenCode | 4 | 5,851 tok |
| mock-server/mockserver-monorepo mock-server.com MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspec | 4,999 | Claude Code, Codex, OpenCode | 61 | 8,408 tok |
| mvanhorn/cli-printing-press Every API has a secret identity. This finds it, absorbs every feature from every competing | 4,851 | Claude Code, Codex, OpenCode | 4 | 12,202 tok |
| dmno-dev/varlock varlock.dev AI-safe .env files: Schemas for agents, Secrets for humans. | 4,830 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 2,361 tok |
| nolabs-ai/nono nono.sh agent runtime security - zero trust, zero setup, zero latency agent sandboxing | 4,686 | Claude Code, Codex, OpenCode | 2 | 966 tok |
| haris-musa/excel-mcp-server excelmcpserver.com Excel MCP server: let AI (Claude, Cursor, Codex) create and edit Excel files with charts, | 4,268 | Claude Code, Codex, OpenCode | 2 | 4,211 tok |
| nextdns/nextdns nextdns.io NextDNS CLI client (DoH Proxy) | 4,229 | Codex, OpenCode | 1 | 941 tok |
| beenuar/AiSOC beenuar.github.io Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK in | 3,983 | Codex, OpenCode | 1 | 2,084 tok |
| ilysenko/codex-desktop-linux Unofficial ChatGPT desktop app for Linux (formerly the Codex app), built locally from Open | 3,917 | Codex, OpenCode | 1 | 1,667 tok |
| nextlevelbuilder/goclaw goclaw.sh GoClaw - GoClaw is OpenClaw rebuilt in Go — with multi-tenant isolation, 5-layer security, | 3,675 | Claude Code, Codex, OpenCode | 2 | 12,319 tok |
| gmh5225/awesome-game-security gs.awesome.rip awesome game security [Welcome to PR] | 3,650 | Codex, OpenCode | 1 | 359 tok |
| langchain-ai/langgraphjs docs.langchain.com Framework to build resilient language agents as graphs. | 3,377 | Codex, OpenCode | 1 | 499 tok |
| TanStack/ai tanstack.com 🤖 Type-safe, provider-agnostic TypeScript AI SDK for streaming chat, tool calling, agents | 3,258 | Claude Code, Codex, OpenCode | 14 | 7,965 tok |
| samugit83/redamon redamon.org Open-source, self-hosted AI penetration testing framework: maps your attack surface into a | 3,221 | Claude Code, Codex, OpenCode | 2 | 2,719 tok |
| LLMQuant/quant-mind llmquantdata.com QuantMind is an open source agent-native knowledge extraction and retrieval framework for | 3,115 | Claude Code, Codex, OpenCode | 5 | 2,264 tok |
| chaterm/Chaterm chaterm.ai Open source AI terminal for cloud and infrastructure management, enabling you to deploy, t | 3,102 | Claude Code, Codex, OpenCode | 2 | 4,048 tok |
| visa/visa-vulnerability-agentic-harness Visa Vulnerability Agentic Harness | 3,010 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 4,744 tok |
| openlit/openlit docs.openlit.io OpenLIT is the open-source agent harness engineering platform: trace, evaluate, guard, and | 2,886 | Claude Code, Codex, OpenCode | 4 | 829 tok |
| Asymptote-Labs/agent-beacon beacon.sh The cross-harness, self-improving memory layer for AI agents. Join our community: https:// | 2,865 | Claude Code, Codex, OpenCode | 3 | 21,838 tok |
| slavakurilyak/awesome-ai-agents Awesome list of 300+ agentic AI resources | 2,731 | Codex, OpenCode | 1 | 403 tok |
| derv82/wifit3 Wifite but USB-only & cross-platform. | 2,723 | Claude Code, Codex, OpenCode | 3 | 2,050 tok |
| SummerSec/ShiroAttack2 Comprehensive exploitation of Shiro deserialization vulnerabilities (for authorized testin | 2,634 | Claude Code, Codex, OpenCode | 3 | 2,182 tok |
| google/mantis cloud.google.com A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, an | 2,563 | Codex, OpenCode | 1 | 824 tok |