Sandbox
157 repos for withings · SecurityClear
runxhq/
runx

the governed runtime for agent skill workflows, off the leash but on the record

84
netresearch/
security-audit-skill

Agent Skill for PHP security audits - OWASP patterns, vulnerability detection | Claude Code compatible

41
CodelyTV/
agent-harness

Our agent harness: Skills, plugins, hooks, and utilities to improve the quality of your agent.

261

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

95
wshobson/
commands
wshobson/commandsRules & Prompts

A collection of production-ready slash commands for Claude Code

2.6k

Evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.

156

Minimal Postgres editor for speed, collaboration, and AI

148

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.

1.5k
Kong/
kong

🦍 The API and AI Gateway

44k
iammm0/
secbot

Authorized security testing workspace. v2 TypeScript terminal product on release; v1 Python on pypi-release; Go branch is demo only.

73
AIPentest/
CyberStrikeAI

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

6.5k

Open-source governed, local-first memory control plane for AI agents and teams. arXiv:2608.08253

224
qcri/
codebadger
qcri/codebadgerConnectors

🦡 codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code Property Graphs (CPGs).

167
AnastasiyaW/
codex-claude-code-config

Claude Code, Codex, and multi-agent configuration system: principles, hooks, skills, and workflow patterns for AI-assisted development

150

secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.

4k

Remote approvals, policy checks, and execution evidence for unattended AI agents.

301

Enterprise Governance Layer (Identity, RBAC, Credentials, Auditing, Logging, Tracing) for the Model Context Protocol SDK

39
agamm/
claude-code-owasp

Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.

358
H-mmer/
pentest-agents
H-mmer/pentest-agentsFrameworks & SDKs

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

904
golf-mcp/
golf
golf-mcp/golfFrameworks & SDKs

Production-Ready MCP Server Framework • Build, deploy & scale secure AI agent infrastructure • Includes Auth, Observability, Debugger, Telemetry & Runtime • Run real-world MCPs powering AI Agents

840