An awesome list of tools and resources for breaking, hardening, and securing LLMs.
aiai-agentsai-safetyai-securityai-security-toolai-toolsawesomeawesome-list
Source: GitHub repository metadata.
Repository search
Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
1,112 matching repositories.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
Dependency vulnerability and malicious-package guard with memory, for AI coding agents. Checks lockfiles against OSV at session start, vets packages before install, and reports only what changed since the last check. Works with Claude Code, Codex, Cursor, Gemini CLI, Copilot and more.
agent-skillsai-agentsclaude-codeclicodexcomposercursorcve
Source: GitHub repository metadata.
Pre-AI repo sanitization. Redact secrets before your code meets the LLM.
ai-securityclidevsecopspii-detectionredactionsecret-scanning
Source: GitHub repository metadata.
Agent skill for static, read-only security review of your own application source: recon, multi-perspective review, verification, and dashboard/PDF reports.
agent-skillsappsecclaude-codecode-reviewdependency-scanningsastsecuritysecurity-audit
Source: GitHub repository metadata.
Cross-language fixture repository for testing dependency discovery and vulnerable-package surfacing across manifests, lockfiles, and vendored package metadata.
dependency-analysisdependency-scanningsecuritysoftware-composition-analysissupply-chain-attacksupply-chain-securitytest-fixturesvulnerability-detection
Source: GitHub repository metadata.
TCP/IP packet demultiplexer. Download from:
digital-forensicsforensicstcp-protocoltcpip
Source: GitHub repository metadata.
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
bug-bountybugbountybugbounty-tooldnshackingnucleiosintpenetration-testing
Source: GitHub repository metadata.
Local-first blue-team security platform. Scans code, secrets, dependencies, and databases in isolated local sandboxes, verifies fixes, and opens PRs to GitHub.
appsecblue-teamcybersecuritydatabase-securitydocker-sandboxiac-securitylocal-firstpull-requests
Source: GitHub repository metadata.
Volatility, on Docker 🐳
digital-forensicsdockerforensicsmemory-forensicsvolatilityvolatility-frameworkvolatility3
Source: GitHub repository metadata.
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
auditbeaconbug-bountybug-huntingc2hackinginfosecoffensive-security
Source: GitHub repository metadata.
Privacy-first, end-to-end encrypted Mail, Pages, Drive, and Calendar.
calendarcollaborationcomponent-librarycryptographyemailend-to-end-encryptionfile-storageproductivity
Source: GitHub repository metadata.
Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 minutes, playing right from your browser.
aiai-securitycode-securitycoding-trainingcybersecurityonline-coursesecure-codingsecurity-training
Source: GitHub repository metadata.
Free dependency vulnerability scanner — scans full transitive tree for CVEs. Supports npm, PyPI, Maven. No signup.
cvecve-scanningdependenciesdependency-checkerdependency-graphdependency-scannerdependency-scanningdevsecops
Source: GitHub repository metadata.
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
forensicsincident-responsentfssleuthkittct
Source: GitHub repository metadata.
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
acmeacme-servercacertificate-authoritycertificatesgopkisecurity
Source: GitHub repository metadata.
🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
certificatecryptographyencryptionjosejwejwsjwtmfa
Source: GitHub repository metadata.
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
attacksurfacecticybersecurityfootprintinghackinginformation-gatheringinformation-securityinfosec
Source: GitHub repository metadata.
Platforms and resources for practicing cybersecurity and penetration testing skills in legal environments.
awesomeawesome-listcybersecurityhackinglearning-labslearning-resources
Source: GitHub repository metadata.
SMRT MRKT X © OFFICIAL WEBSITE | SVELTEKIT | MIT_License.
awesomecryptocybersecuritydaisy-uidaisyuidigitalflowbite-sveltefullstack-development
Source: GitHub repository metadata.
An AI-ready security scanner for public GitHub repositories that detects exposed secrets and vulnerable dependencies, calculates a security score, and exports actionable PDF and AI-friendly reports.
ai-readycvsscybersecuritydependency-scanninggithubllm-reportsnextjsnodejs
Source: GitHub repository metadata.
What this index tells you
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.