23 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,321Claude Code6,834Data and AI3,600Backend and APIs3,547Git and workflow3,531Languages3,455Planning3,297Code review2,865Testing2,607DevOps and cloud2,439Writing and docs2,428Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| analysis-tools-dev/static-analysis analysis-tools.dev ⚙️ A curated list of static analysis (SAST) tools and linters for all programming language | 14,856 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 5 | 515 tok |
| leancoderkavy/premiere-pro-mcp premiere-pro-mcp.com Adobe Premiere Pro MCP — independent, local-first server for supported workflows. Connect | 440 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 9 | 4,050 tok |
| wellwelwel/lagune lagune.ai 🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether | 173 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 6 | 2,785 tok |
| sandraschi/windows-computer-use-mcp Windows Computer Use for AI Agents. Both a tool (22 MCP tools for click, type, screenshot, | 48 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 6 | 2,195 tok |
| GitGuardian/ggmcp gitguardian.com MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 | 41 | Claude Code, Codex, OpenCode, Windsurf | 5 | 2,572 tok |
| KhaledSaeed18/node-express-boilerplate Production-ready Express + TypeScript backend boilerplate with clean layered architecture, | 36 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 6 | 1,536 tok |
| sseshachala/conductai conductai.ai Runtime governance for AI agents. Allow, warn, or block every model and tool call before i | 32 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 11 | 5,722 tok |
| Bugb-Technologies/guardlink guardlink.bugb.io AI-maintained security annotations for code. Continuous threat modeling, enforced in CI. | 19 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 3,361 tok |
| mustel-py/mustel mustel.vercel.app Non-AI static analysis layer for AI coding agents - Ruff, Bandit & pip-audit unified into | 19 | Cursor, Windsurf | 2 | 158 tok |
| snowdreamtech/template snowdreamtech.github.io An enterprise-grade, foundational template designed for multi-AI IDE collaboration. This r | 16 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 7 | 2,764 tok |
| nisargpatel1906/Aethos_Memory Universal, cross-tool persistent memory bank for AI assistants (Claude Code, Cursor, Winds | 5 | Claude Code, Codex, Cursor, OpenCode, Windsurf | 4 | 1,164 tok |
| jgiox/goodvibes One command. Production-grade project. No config. | 5 | Claude Code, Codex, GitHub Copilot, Gemini CLI, Kiro, OpenCode, Windsurf | 16 | 12,349 tok |
| KyaniteLabs/DialectOS kyanitelabs.github.io Spanish dialect localization MCP server and CLI. Translate across 25 regional variants wit | 4 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 5 | 4,542 tok |
| sandraschi/devices-mcp MCP server + web dashboard + Windows Tauri app for home LAN devices (Tapo, Hue, Ring, Nest | 4 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 7 | 3,339 tok |
| juwonllee2024-dotcom/rulesync The ESLint & Babel for AI Agent Rules — Compile, lint, optimize, and sync instructions acr | 3 | Claude Code, Codex, GitHub Copilot, OpenCode, Windsurf | 4 | 882 tok |
| dradoaica/cogov-a-sdlc Co-Governed Agentic SDLC (Software Development Life Cycle) | 3 | Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 10 | 252 tok |
| mrzroot/agentforge mrzroot.github.io ⚡ The Universal AI Coding Agent Toolkit & OS. Sync rules across Cursor, Claude Code, Winds | 3 | Claude Code, GitHub Copilot, Cursor, Windsurf | 4 | 1,012 tok |
| hexxla/mcp-ratchet Go package for enforcing tool call order in MCP servers. Token-based dependency system wit | 2 | Claude Code, Codex, OpenCode, Windsurf | 17 | 1,910 tok |
| hannsxpeter/authenticity-check Pure-prompt skill that scores how authentically text reads as a real human author's work a | 2 | Codex, GitHub Copilot, Gemini CLI, OpenCode, Windsurf | 4 | 2,789 tok |
| wtalaat78/Blue-Team-Skills | 2 | Claude Code, Codex, GitHub Copilot, Cursor, OpenCode, Windsurf | 8 | 5,139 tok |
| TheArchitectit/agent-guardrails-template Template repository with AI agent guardrails, safety protocols, and sprint task framework. | 1 | Claude Code, GitHub Copilot, Windsurf | 3 | 2,499 tok |
| nolindnaidoo/secrets-le letools.dev Find hardcoded credentials in a codebase, and never print one into the report | 1 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 6 | 10,095 tok |
| nilhemdot/bountystrike-community BountyStrike Community Edition — Claude Code-native autonomous bug bounty platform (AGPLv3 | 1 | Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Windsurf | 24 | 6,009 tok |