Adel Ka

bumblebee-hive. Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

coder. Secure environments for developers and their agents

awesome-ai-security-tools. A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more.

breachsleuth. Offline breach data triage and analysis tool for security analysts

socbench. An Open Benchmark for AI in Cybersecurity Operations.

rustmachineguard. Rust rewrite of step-security/dev-machine-guard — scan your dev machine for AI agents, MCP servers, IDE extensions, and more. Not affiliated with StepSecurity.

dev-machine-guard. Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.

strix. Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

package-proxy. Inline proxy for software package registries to provide observability and policy controls to installs.

MachOExplorer. 🧱Explore MachO File on macOS and Windows

Platypus. Create native macOS applications from command line scripts.

friTap. Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.

sandlock. The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection

agentsight. System-level AI agent profling/tracing/monitoring tool and skills in eBPF

binwalk. Firmware Analysis Tool

agent-browser. Browser automation CLI for AI agents

h5i. Auditable workspaces for AI coding agents: sandboxed worktrees, conflict-free multi-agent orchestra, 95% lower token waste, and persistent memory.

omnigent. Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents — swap harnesses without rewriting, enforce policies and sandboxing, and collaborate in real time from any device.

OpenHands. 🙌 OpenHands: AI-Driven Development

sliver. Adversary Emulation Framework

container. A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

bumblebee. Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

bubblewrap. Low-level unprivileged sandboxing tool used by Flatpak and similar projects

nano. Lightweight open-core SIEM in Rust — ClickHouse for logs, Postgres for state.

prempti. Falco-powered policy and visibility layer for AI coding agents

sondera-coding-agent-hooks. Hooking implementations and supporting tools for various coding agents (Claude, Cursor, Gemini, etc)

gryph. Security layer for AI coding agents. Works with Claude Code, Cursor, Windsurf, Gemini CLI, OpenCode, Pi Agent and more.

mcp-reticle. Reticle intercepts, visualizes, and profiles JSON-RPC traffic between your LLM and MCP servers in real-time, with zero latency overhead. Stop debugging blind. Start seeing everything.

malicious-packages. A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

package-analysis. Open Source Package Analysis

tetragon. eBPF-based Security Observability and Runtime Enforcement

ai-engineering-from-scratch. Learn it. Build it. Ship it for others.

verdaccio. A lightweight Node.js private proxy registry

hermes-agent. The agent that grows with you

safe-chain. Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

bumblebee. Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

OpenSpec. Spec-driven development (SDD) for AI coding assistants.

agent-scan. Security scanner for AI agents, MCP servers and agent skills.

ironcurtain. A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)

shadowbrokers-exploits. Mirror of Shadowbrokers release from https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation

cyber_rss. a list of useful feeds

Peekaboo. Peekaboo is a macOS CLI & optional MCP server that enables AI agents to capture screenshots of applications, or the entire system, with optional visual question answering through local or remote AI models.

dirtyfrag. C

cerebro. Compliance superpowers for coding agents.

iam-identity-center-team. Open-source temporary elevated access solution for AWS IAM Identity Center.

guardian-sdk. Ethicore Engine™ is an AI safety, ethics, and compliance platform. This repo consists of the open-source components of Ethicore Engine™ - Guardian SDK; designed to protect your AI applications from prompt injection, jailbreaks, role hijacking, system-prompt extraction, and 100+ additional threat categories through a multi-layer analysis pipeline

prismor. Runtime Firewall for AI agents which catches the rogue tool call before it runs. Dangerous commands, secret leaks, prompt injection. For Claude Code, Codex and framework SDKs

flux. HTTP honeypot on autopilot

vulnerability-spoiler-alert. A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings are published to a retro-themed website with an RSS feed.

nanoclaw. A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK

V3SP3R. AI Flipper control

autoevals. AutoEvals is a tool for quickly and easily evaluating AI model outputs using best practices.

openinference. OpenTelemetry Instrumentation for AI Observability

redai. AI-driven vulnerability discovery and live validation

supabase. The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.

iron-proxy. An egress firewall for untrusted workloads.

buttercup. Buttercup finds and patches software vulnerabilities

vigil. Vigil - an ever improving 100% OpenSource AI system for security

sage. Lightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.

skills. The open agent skills tool - npx skills

mcp-xray. Go

OpenAnt. OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery product, helping defenders proactively find verified security flaws while minimizing both false positives and false negatives. Stage 1 detects. Stage 2 attacks. What survives is real.

hello-agents. 📚 《从零开始构建智能体》——从零开始的智能体原理与实践教程

claude-code-devcontainer. Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.

dropkit. A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.

raptor. Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

playwright. Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

cognee. Cognee is the open-source AI memory platform for agents. Give your AI agents persistent long-term memory across sessions with a self-hosted knowledge graph engine.

dexter. An autonomous agent for deep financial research

CyberStrikeAI. Agentic execution layer for modern cyber security, turning security intent into precise, governed, auditable action through AI agents, MCP-native tools, knowledge, approvals, and attack-chain context.

awesome-claude-code-subagents. A collection of 100+ specialized Claude Code subagents covering a wide range of development use cases

claude-code-best-practice. from vibe coding to agentic engineering - practice makes claude perfect

tirith. Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.

gap. Give AI agents secure access to your accounts - without sharing your credentials

amla-sandbox. Python

MoaV. Mother of all VPNs

Adversarial-Detection-Engineering-Framework. A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concrete examples and real-world bypasses.

3x-ui. Xray panel supporting multi-protocol multi-user expire day & traffic & IP limit (Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto)

clawhub. Skill + Plugin Registry for OpenClaw

skill-scanner. Security Scanner for Agent Skills

openclaw. Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

ibis. the portable Python dataframe library

langtrace. Langtrace 🔍 is an open-source, Open Telemetry based end-to-end observability tool for LLM applications, providing real-time tracing, evaluations and metrics for popular LLMs, LLM frameworks, vectorDBs and more.. Integrate using Typescript, Python. 🚀💻📊

anamnesis-release. Automatic Exploit Generation with LLMs

tracee. Linux Runtime Security and Forensics using eBPF

hubble. Hubble - Network, Service & Security Observability for Kubernetes using eBPF

awesome-dfir-skills. A curated collection of DFIR skills and workflows for InfoSec practitioners.

awesome-agent-skills. A curated collection of 1000+ agent skills from official dev teams and the community, compatible with Claude Code, Codex, Gemini CLI, Cursor, and more.

skills. Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

Acontext. Agent Skills as a Memory Layer

opencode. The open source coding agent.

katalina. Go

nocodb. 🔥 🔥 🔥 A Free & Self-hostable Airtable Alternative

leash. Leash by StrongDM - take your AI agents for a walk

MacPersistenceChecker. macOS persistence mechanism scanner with code signature verification and timeline tracking.

skills. Public repository for Agent Skills

ag-ui. AG-UI: the Agent-User Interaction Protocol. Bring Agents into Frontend Applications.

Maestro. Agent Orchestration Command Center

shannon. Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

agentic-threat-hunting-framework. ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.