The rules real projects give Cursor's agent, from .cursor/rules.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
millioncoCursor rulemillionco/expect/.cursor/rules/web-quality-audit.mdc
Use when asked to audit web quality, review a page for issues, check Lighthouse scores, or optimize a site for performance, accessibility, SEO, or best practices.
Steady17 mentions in 2 weeks
No other project uses it yet
bestofjsCursor rulebestofjs/bestofjs/.cursor/rules/bmad/architect.mdc
Optimize holistically across all layers - Developer Experience as First-Class Concern - Enable developer productivity - Security at Every Layer - Implement defense in depth - Data-Centric Design - Let data requirements drive architecture
bestofjsCursor rulebestofjs/bestofjs/.cursor/rules/bmad/qa.mdc
patterns - Risk-Based Testing - Assess and prioritize by probability × impact - Quality Attributes - Validate NFRs (security, performance, reliability) via scenarios - Testability Assessment - Evaluate controllability, observability, debuggability - Gate Governance - Provide clear PASS/CONCERNS/FAIL/WAIVED
SynkraAICursor ruleSynkraAI/aios-core/.cursor/rules/agents/architect.mdc
AIOX agent @architect - Architect
1 project uses a version of this
SynkraAICursor ruleSynkraAI/aios-core/.cursor/rules/agents/data-engineer.mdc
AIOX agent @data-engineer - Database Architect & Operations Engineer
1 project uses a version of this
SynkraAICursor ruleSynkraAI/aios-core/.cursor/rules/agents/qa.mdc
AIOX agent @qa - Test Architect & Quality Advisor
apptensionCursor ruleapptension/saas-boilerplate/.cursor/rules/backend.mdc
Backend Python/Django patterns and best practices
No other project uses it yet
apptensionCursor ruleapptension/saas-boilerplate/.cursor/rules/security-prompt.mdc
alwaysApply: false --- You are a senior application security engineer performing a defensive secure code review. You must think like an attacker to identify vulnerabilities, but you MUST NOT provide step
apptensionCursor ruleapptension/saas-boilerplate/.cursor/rules/testing.mdc
Testing conventions and patterns
srl-labsCursor rulesrl-labs/containerlab/.cursor/rules/ponytail.mdc
Ponytail, lazy senior dev mode. Always pick the simplest solution that works.
Steady2 mentions in 2 weeks
1 project uses a version of this
ethereumjsCursor ruleethereumjs/ethereumjs-monorepo/.cursor/rules/benchmarks.mdc
Performance benchmarks (Vitest bench + CodSpeed CI)
ethereumjsCursor ruleethereumjs/ethereumjs-monorepo/.cursor/rules/git.mdc
Git conventions — when to commit/push/PR, renames, PR title/body, labels
wassim249Reads credentialsCursor rulewassim249/fastapi-langgraph-agent-production-ready-template/.cursor/rules/project-main-rules.mdc
FastAPI, LangGraph, and LangChain. This is a **LangGraph FastAPI Agent Project** for building scalable, secure AI agent services with LLM orchestration, observability, and persistence. ## Project Architecture Overview This
cisco-ai-defenseCursor rulecisco-ai-defense/skill-scanner/.cursor/rules/codeguard-0-additional-cryptography.mdc
Additional Cryptography guidance
Steady3 mentions in 2 weeks
2 projects use a version of this
cisco-ai-defenseCursor rulecisco-ai-defense/skill-scanner/.cursor/rules/codeguard-1-hardcoded-credentials.mdc
No Hardcoded Credentials
Steady3 mentions in 2 weeks
2 projects use a version of this
NVIDIAReads credentialsCursor ruleNVIDIA/NeMo-Agent-Toolkit/.cursor/rules/general.mdc
Follow these rules when creating, modifying, or generating any code, tests, documentation, or configuration files
Steady2 mentions in 2 weeks
1 project uses a version of this
ballerine-ioCursor ruleballerine-io/ballerine/.cursor/rules/backoffice-v2.mdc
Rules and best practices for backoffice-v2 React TypeScript development
ballerine-ioCursor ruleballerine-io/ballerine/.cursor/rules/workflows-dashboard.mdc
Rules and best practices for workflows-dashboard React TypeScript development
slimm609Cursor ruleslimm609/checksec/.cursor/rules/general-rules.mdc
alwaysApply: true --- # Checksec Security Rules Checksec is an open source Go tool that analyzes security properties of executables (PIE, RELRO, Canaries, ASLR, Fortify Source, etc.). This tool parses ELF binaries
quantizorCursor rulequantizor/markdown-to-jsx/.cursor/rules/i18n-hi.mdc
टाइप, Spec/Specification=विनिर्देश/स्पेक, Syntax=सिंटैक्स, Content=कंटेंट/सामग्री, Value=मान/वैल्यू, Expression=एक्सप्रेशन, Security=सुरक्षा, XSS=XSS, Safe=सुरक्षित, Unsafe=असुरक्षित, Filter=फ़िल्टर, Escape=एस्केप, Entity=एंटिटी, Character=वर्ण
No other project uses it yet
Instruction files for Cursor's agent, kept in .cursor/rules/ as .mdc files.
A rule can apply only to files matching a pattern, or only when the agent asks for it. AGENTS.md always applies.
Copy the .mdc file into your project's .cursor/rules/ directory and adjust its globs.
Open a rule to see its discussion. Reports from people and their agents are coming.
