973 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,374Claude Code6,573Data and AI3,706Backend and APIs3,486Languages3,398Planning3,181Git and workflow3,100Code review2,701Memory and context2,354Testing2,311Research2,292DevOps and cloud2,282
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| affaan-m/ECC ecc.tools The agent harness performance optimization system. Skills, instincts, memory, security, an | 251,781 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,778 tok |
| usestrix/strix strix.ai Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. | 60,988 | Codex, OpenCode | 1 | 1,847 tok |
| colinhacks/zod zod.dev TypeScript-first schema validation with static type inference | 43,847 | Claude Code, Codex, Cursor, OpenCode | 5 | 5,780 tok |
| danny-avila/LibreChat librechat.ai Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Re | 42,878 | Claude Code, Codex, OpenCode | 2 | 4,147 tok |
| rapid7/metasploit-framework metasploit.com Metasploit Framework | 38,946 | Codex, GitHub Copilot, OpenCode | 6 | 7,425 tok |
| zhaoxuya520/reverse-skill Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack | 34,866 | Claude Code, Codex, OpenCode | 2 | 1,078 tok |
| OWASP/CheatSheetSeries cheatsheetseries.owasp.org The OWASP Cheat Sheet Series was created to provide a concise collection of high value inf | 33,104 | Claude Code, Codex, OpenCode | 2 | 2,094 tok |
| mukul975/Anthropic-Cybersecurity-Skills mahipal.engineer 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, | 32,321 | Codex, GitHub Copilot, OpenCode | 2 | 5,015 tok |
| activepieces/activepieces activepieces.com AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automati | 24,304 | Claude Code, Codex, OpenCode | 22 | 9,534 tok |
| semgrep/semgrep semgrep.dev Lightweight static analysis for many languages. Find bug variants with patterns that look | 16,533 | Claude Code, Codex, OpenCode | 2 | 2,020 tok |
| analysis-tools-dev/static-analysis analysis-tools.dev ⚙️ A curated list of static analysis (SAST) tools and linters for all programming language | 14,767 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode | 4 | 344 tok |
| prowler-cloud/prowler prowler.com Prowler is the world’s most widely used open-source cloud security platform that automates | 14,765 | Claude Code, Codex, OpenCode | 2 | 2,928 tok |
| TencentCloud/CubeSandbox cubesandbox.com Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents. | 11,808 | Claude Code, Codex, OpenCode | 11 | 232 tok |
| data-privacy-stack/presidio presidio.dataprivacystack.org An open-source framework for detecting, redacting, masking, and anonymizing sensitive data | 10,759 | Claude Code, Codex, GitHub Copilot, OpenCode | 5 | 6,710 tok |
| NVIDIA/garak discord.gg the LLM vulnerability scanner | 9,120 | Codex, OpenCode | 1 | 1,415 tok |
| backnotprop/plannotator plannotator.ai Annotate and review coding agent plans and code diffs visually, share with your team, send | 8,528 | Claude Code, Codex, OpenCode | 6 | 35,880 tok |
| NVIDIA/OpenShell docs.nvidia.com OpenShell is the safe, private runtime for autonomous AI agents. | 8,524 | Claude Code, Codex, OpenCode | 22 | 4,796 tok |
| kunchenguid/no-mistakes kunchenguid.github.io git push no-mistakes | 8,331 | Claude Code, Codex, OpenCode | 17 | 5,764 tok |
| superradcompany/microsandbox docs.microsandbox.dev 🧱 Easy fast local-first microVM runtime and library | 8,104 | Codex, OpenCode | 1 | 3,652 tok |
| zeek/zeek zeek.org Zeek is a powerful network analysis framework that is much different from the typical IDS | 7,941 | Codex, OpenCode | 1 | 823 tok |
| trailofbits/skills Trail of Bits Claude Code skills for security research, vulnerability detection, and audit | 6,988 | Claude Code, Codex, OpenCode | 2 | 4,752 tok |
| j3ssie/osmedeus osmedeus.org A Modern Orchestration Engine for Security | 6,551 | Claude Code, Codex, OpenCode | 2 | 8,804 tok |
| microsoft/agent-governance-toolkit AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxin | 6,209 | Codex, GitHub Copilot, OpenCode | 2 | 7,473 tok |
| Tencent/AI-Infra-Guard tencent.github.io A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, M | 6,166 | Claude Code, Codex, OpenCode | 2 | 2,177 tok |
| FlorianBruniaux/claude-code-ultimate-guide cc.bruniaux.com The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, q | 5,909 | Claude Code, Codex, GitHub Copilot, OpenCode | 10 | 5,911 tok |
| mock-server/mockserver-monorepo mock-server.com MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspec | 4,966 | Claude Code, Codex, OpenCode | 61 | 7,403 tok |
| Awarexone/Agentic-Bug-Hunter awarexone.com AI-powered bug bounty hunting toolkit that works with or without subscription. | 4,715 | Claude Code, Codex, OpenCode | 4 | 5,851 tok |
| mvanhorn/cli-printing-press Every API has a secret identity. This finds it, absorbs every feature from every competing | 4,639 | Claude Code, Codex, OpenCode | 4 | 10,111 tok |
| dmno-dev/varlock varlock.dev AI-safe .env files: Schemas for agents, Secrets for humans. | 4,298 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 2,320 tok |
| nolabs-ai/nono nono.sh secure multiplexed execution paths for agents - zero trust, zero setup, zero latency. | 3,992 | Claude Code, Codex, OpenCode | 2 | 2,527 tok |
| sourcebot-dev/sourcebot sourcebot.dev Sourcebot is a self-hosted tool that helps humans and agents understand your codebase. | 3,930 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 5,548 tok |
| ilysenko/codex-desktop-linux Unofficial ChatGPT desktop app for Linux (formerly the Codex app), built locally from Open | 3,774 | Codex, OpenCode | 1 | 1,444 tok |
| nextlevelbuilder/goclaw goclaw.sh GoClaw - GoClaw is OpenClaw rebuilt in Go — with multi-tenant isolation, 5-layer security, | 3,590 | Claude Code, Codex, OpenCode | 2 | 12,319 tok |
| langchain-ai/langgraphjs docs.langchain.com Framework to build resilient language agents as graphs. | 3,251 | Claude Code, Codex, OpenCode | 2 | 551 tok |
| TanStack/ai tanstack.com 🤖 Type-safe, provider-agnostic TypeScript AI SDK for streaming chat, tool calling, agents | 3,074 | Claude Code, Codex, OpenCode | 12 | 7,416 tok |
| chaterm/Chaterm chaterm.ai Open source AI terminal for cloud and infrastructure management, enabling you to deploy, t | 3,035 | Claude Code, Codex, OpenCode | 2 | 3,932 tok |
| ccch1mneyyy/dsh-TUI dshtui.com DSH official WeChat featured TUI plugin — Claude Code style: whale bar, live status, strea | 2,870 | Claude Code, Codex, OpenCode | 9 | 2,096 tok |
| LLMQuant/quant-mind llmquantdata.com QuantMind is an agent-native knowledge extraction and retrieval framework for quantitative | 2,818 | Claude Code, Codex, OpenCode | 5 | 2,264 tok |
| openlit/openlit docs.openlit.io Open source platform for AI Engineering: OpenTelemetry-native LLM Observability, GPU Monit | 2,744 | Claude Code, Codex, OpenCode | 4 | 829 tok |
| visa/visa-vulnerability-agentic-harness Visa Vulnerability Agentic Harness | 2,735 | Claude Code, Codex, GitHub Copilot, OpenCode | 3 | 3,632 tok |
| SummerSec/ShiroAttack2 Comprehensive exploitation of Shiro deserialization vulnerabilities (for authorized testin | 2,625 | Claude Code, Codex, OpenCode | 3 | 2,182 tok |
| lestrrat-go/jwx Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologie | 2,421 | Claude Code, Codex, OpenCode | 3 | 3,061 tok |
| samugit83/redamon An AI-powered agentic red team framework that automates offensive security operations, fro | 2,401 | Claude Code, Codex, OpenCode | 2 | 2,279 tok |
| beenuar/AiSOC tryaisoc.com Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agen | 2,368 | Codex, OpenCode | 1 | 6,497 tok |
| zakirkun/deep-eye Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, M | 2,284 | Claude Code, Codex, OpenCode | 8 | 2,919 tok |
| Kritt-ai/open-kritt kritt.ai Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find a | 2,061 | Codex, OpenCode | 1 | 2,190 tok |
| eugene1g/agent-safehouse agent-safehouse.dev Sandbox your local AI agents so they can read/write only what they need | 2,050 | Claude Code, Codex, OpenCode | 3 | 1,353 tok |
| evilsocket/legba legba.evilsocket.net The fastest and more comprehensive multiprotocol credentials bruteforcer / password spraye | 1,939 | Claude Code, Codex, OpenCode | 2 | 2,269 tok |
| mcollina/skills My own collection of skills for modern Node.js development | 1,912 | Codex, OpenCode | 1 | 652 tok |
| xerj-org/xerj xerj.org XERJ is the new way for AI to search data. Its autoindex capability activates agents to kn | 1,887 | Codex, OpenCode | 1 | 4,524 tok |