118 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| colinhacks/zod zod.dev TypeScript-first schema validation with static type inference | 44,202 | Claude Code, Codex, Cursor, OpenCode | 5 | 5,141 tok |
| trufflesecurity/trufflehog trufflesecurity.com Find, verify, and analyze leaked credentials | 28,719 | Cursor | 1 | — |
| analysis-tools-dev/static-analysis analysis-tools.dev ⚙️ A curated list of static analysis (SAST) tools and linters for all programming language | 14,856 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 5 | 515 tok |
| cool-team-official/cool-admin-midway cool-js.com 🔥 cool-admin (Midway edition), a powerful backend permission management framework featuri | 3,280 | Cursor | 1 | 807 tok |
| nuwax-ai/nuwax nuwax.com Nuwax Agent OS - An enterprise-grade AI Agent Development and Operation Platform - Providi | 897 | Claude Code, Codex, Cursor, OpenCode | 9 | 3,533 tok |
| Kymo-MCP/mcpcan mcpcan.com MCPCAN is a centralized management platform for MCP services. It deploys each MCP service | 728 | Cursor | 1 | 239 tok |
| Zyrexnn/Cybermes Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes | 668 | Codex, Cursor, OpenCode | 2 | 2,021 tok |
| MHaggis/Security-Detections-MCP detect.michaelhaag.org MCP to help Defenders Detection Engineer Harder and Smarter | 503 | Claude Code, Cursor | 30 | — |
| epam/ai-dial-chat chat.dialx.ai A default UI for AI DIAL | 502 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 52 | 4,850 tok |
| OWASP/DockSec owasp.github.io AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWAS | 498 | Cursor | 1 | 112 tok |
| professorpalmer/Puppetmaster Provider-neutral control plane for durable-state agent swarms: subprocess workers, leases, | 471 | Claude Code, Codex, Cursor, OpenCode | 2 | 4,706 tok |
| H4D3ZS/vscodium-rust cyberifrit.xyz AI-native IDE with agentic workflows, iPhone emulation on Windows/Linux, PyTorch ML Studi | 256 | Cursor | 1 | 349 tok |
| bbartling/open-fdd Fault Detection Diagnostics (FDD) for HVAC datasets | 176 | Claude Code, Codex, Cursor, OpenCode | 17 | 7,061 tok |
| wellwelwel/lagune lagune.ai 🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether | 173 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 6 | 2,785 tok |
| elliot35/deterministic-agent-control-protocol npmjs.com Governance gateway for AI agents — bounded, auditable, session-aware control with MCP prox | 82 | Cursor | 1 | — |
| XiaoYiWeio/deepsafe-scan Universal preflight security scanner for AI coding agents — Detects hooks injection, crede | 77 | Claude Code, Codex, Cursor, OpenCode | 3 | 1,625 tok |
| nitinjain999/platform-skills A platform engineering handbook covering Kubernetes, OpenShift, Argo CD, Flux CD, AWS, Azu | 70 | Claude Code, GitHub Copilot, Cursor | 3 | 8,537 tok |
| ruaan-deysel/unraid-management-agent Go-based Unraid plugin monitor and control your Unraid system via REST API, WebSocket, MCP | 65 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode | 20 | 10,246 tok |
| SkeneTechnologies/skene-cookbook 700+ AI skills for Claude and Cursor — PLG, marketing, security, DevEx, and more. One comm | 55 | Codex, Cursor, OpenCode | 2 | 3,860 tok |
| sandraschi/windows-computer-use-mcp Windows Computer Use for AI Agents. Both a tool (22 MCP tools for click, type, screenshot, | 48 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 6 | 2,195 tok |
| FouadMagdy01/RNCopilot Production-ready React Native Expo starter template with auth, theming, i18n, and 33+ UI | 43 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 7 | 11,654 tok |
| Seezo-io/cursor-security-rules Cursor rules to secure your vibe coding! | 34 | Cursor | 1 | 1,200 tok |
| redhat-community-ai-tools/harness-eval Evaluate (lint, review, and security-audit) your AI coding agent harness. | 32 | Claude Code, Cursor | 6 | 1,147 tok |
| sseshachala/conductai conductai.ai Runtime governance for AI agents. Allow, warn, or block every model and tool call before i | 32 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 11 | 5,722 tok |
| r5rana/agentware Framework that makes your LLM self-aware, loops with self-learning and persistent memory t | 24 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 34 | 4,731 tok |
| wangjianjq/Skill Auto agents | 24 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode | 45 | 8,297 tok |
| A-G-U-P-T-A/wireshark-mcp a-g-u-p-t-a.github.io TShark/Wireshark MCP server for network packet analysis via Claude | 24 | Cursor | 1 | — |
| gemvc/gemvc gemvc.de A lightweight, server-agnostic PHP framework (Swoole/Nginx/Apache) designed for building h | 22 | Cursor | 2 | 1,588 tok |
| mustel-py/mustel mustel.vercel.app Non-AI static analysis layer for AI coding agents - Ruff, Bandit & pip-audit unified into | 19 | Cursor, Windsurf | 2 | 158 tok |
| ashlrai/phantom-secrets phm.dev Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secret | 18 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 6,798 tok |
| snowdreamtech/template snowdreamtech.github.io An enterprise-grade, foundational template designed for multi-AI IDE collaboration. This r | 16 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 7 | 2,764 tok |
| ensingm2/AI-threat-modeling-rulesets A collection of rule and instruction sets for AI systems such as GitHub copilot and Cursor | 12 | GitHub Copilot, Cursor | 2 | 1,449 tok |
| dfirtnt/Huntable-CTI-Studio dfirtnt.wordpress.com Huntable CTI Studio is an AI-assisted cyber threat intelligence workbench that turns open- | 11 | Claude Code, Codex, Cursor, OpenCode | 32 | 4,458 tok |
| project-kessel/insights-rbac Role based access control API service | 11 | Claude Code, Codex, Cursor, OpenCode | 8 | 2,706 tok |
| FavioVazquez/mollify Deterministic codebase intelligence for Python | 11 | Claude Code, Codex, Cursor, Gemini CLI, OpenCode | 40 | 4,352 tok |
| pranee54/AgentDoctor npmjs.com Codebase intelligence, repository analysis, safety controls, and MCP tools for developers | 10 | Cursor | 4 | — |
| MannanSaood/termi Next-gen Android Terminal Environment. Built with Rust & Jetpack Compose, featuring a cust | 10 | Cursor | 8 | 922 tok |
| MadaBurns/bv-mcp blackveilsecurity.com DNS, email-authentication, TLS and exposure scanning for AI agents: 81 MCP tools, scored 0 | 9 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 20 | 10,311 tok |
| L-X-T/ng-agentic angulararchitects.io A practical Angular workspace starter with modern best practices, AI-ready tooling, and sc | 9 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 2,522 tok |
| SafetyMP/Autonomous-EHS-Management autonomous-ehs-management.vercel.app Self-hosted incident to verified CAPA, with a TRIR that uses annual hours when the month g | 9 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 24 | 2,203 tok |
| ChangooLee/mcp-kr-legislation A Model Context Protocol (MCP) server integrating the Korean Ministry of Government Legisl | 8 | Codex, Cursor, OpenCode | 2 | 7,528 tok |
| vepo/issues Sistema de Gestão de Mudanças | 8 | Claude Code, Codex, Cursor, OpenCode | 25 | 4,153 tok |
| abidjappie/nextjs-quick-starter A modern Next.js starter template with best practices built-in. Features Next.js 16, React | 6 | Cursor | 1 | 16,954 tok |
| doc2mcp/doc2mcp doc2mcp.vercel.app Paste any docs URL — LangChain, Stripe, your own — and get a hosted MCP server Cursor can | 6 | Cursor | 1 | — |
| ashp15205/scankii A local-first SAST & Runtime Security scanner built exclusively for LLM Agents. Detects cr | 6 | Cursor | 1 | 123 tok |
| kings0527/web-reverse-engineering-skill AI-driven Web Reverse Engineering Skill for Codex/Qoder/Claude Code/Cursor | 6 | Cursor | 1 | 1,931 tok |
| Parth308/auditx auditx-cli.vercel.app | 6 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 415 tok |
| yu-iskw/llmops-demo-ts Demonstrate LLMOps in TypeScript | 6 | Claude Code, Cursor | 29 | 1,463 tok |
| nisargpatel1906/Aethos_Memory Universal, cross-tool persistent memory bank for AI assistants (Claude Code, Cursor, Winds | 5 | Claude Code, Codex, Cursor, OpenCode, Windsurf | 4 | 1,164 tok |
| enuno/tailscale-acl Tailscale ACL managed by AI coding agents and automated GitOps workflows. | 5 | Claude Code, Codex, Cursor, OpenCode | 3 | 2,948 tok |