Agent runtimeSecurity and privacy

ironclaw

Run a security-focused personal AI assistant on your own machine or server.

Stars: 12,519
Forks: 1,468
Updated: Updated Jul 10, 2026

Agent runtimeSecurity and privacy

ironclaw

Run a security-focused personal AI assistant on your own machine or server.

Stars: 12,519
Forks: 1,468
Updated: Updated Jul 10, 2026

Agent runtimeSecurity and privacyOpenClaw

NemoClaw

@NVIDIATypeScript

Run supported always-on AI agents inside managed NVIDIA OpenShell sandboxes.

Project overview

Set up OpenClaw, Hermes, or LangChain Deep Agents inside NVIDIA OpenShell with a reference stack that combines guided onboarding, routed inference, network policy, and sandbox lifecycle management behind one CLI. The project focuses on safer long-running agent operation and controlled egress. It is currently described as alpha, with community support provided on a best-effort basis.

Stars: 21,703
Forks: 2,930
License: Apache-2.0

General agentSecurity and privacy

pentagi

@vxcontrolGo

Plan and run authorized penetration tests with autonomous agents in an isolated environment.

Project overview

PentAGI lets autonomous agents plan and execute authorized penetration-testing work inside an isolated Docker environment. It includes more than twenty security tools such as nmap, Metasploit, and sqlmap, and can retain useful findings for later tasks. Cloud and local models are supported; smaller open models benefit from execution monitoring and task planning at the cost of higher token usage.

Stars: 20,544
Forks: 2,718
License: MIT

CLI appSecurity and privacy

SkillSpector

@NVIDIAPython

Scan agent skills for malicious instructions, unsafe code, and supply-chain risks

Project overview

NVIDIA SkillSpector examines Git repositories, URLs, archives, directories, or individual files before an agent skill is installed. It checks dozens of patterns spanning prompt injection, exfiltration, privilege escalation, dangerous code, dependency vulnerabilities, MCP least privilege, and tool poisoning, then produces terminal, JSON, Markdown, or SARIF reports with risk scores. Scanned skills are never executed. Optional LLM analysis sends file contents to the configured provider, while static-only mode keeps that content local.

Stars: 13,153
Forks: 1,066
License: Apache-2.0

Collection or directorySecurity and privacyClaude Code

skills

@trailofbitsPython

Install security auditing, vulnerability research, and development skills for Claude Code or Codex.

Project overview

Trail of Bits Skills Marketplace packages reusable plugins for AI-assisted security analysis, vulnerability research, testing, and selected development workflows. Users can add the marketplace to Claude Code and install individual plugins through its menu, while Codex can load the same marketplace through Claude plugin compatibility. The collection is aimed at security researchers and engineering teams that want repeatable audit procedures available to their coding agents.

Stars: 6,057
Forks: 534
License: CC-BY-SA-4.0

ironclaw

ironclaw

Project overview

Repository facts

Related projects

NemoClaw

pentagi

SkillSpector

skills