Cursor rules examples

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/kotlin-security.md

Kotlin security extending common rules

affaan-mCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/php-security.md

PHP security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/python-security.md

Python security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/swift-security.md

Swift security extending common rules

affaan-mReads credentialsCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/typescript-security.md

TypeScript security extending common rules

santosomarCursor rule

AI-agents-for-cybersecurity / rules

santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-iac-security.mdc

Infrastructure as Code Security

dcrebbinCursor rule

cursor-unchained / rules

dcrebbin/cursor-unchained/.cursor/rules/snyk_rules.mdc

Snyk Security At Inception

hiromailyCursor rule

go-crypto-wallet / rules

hiromaily/go-crypto-wallet/.cursor/rules/security.mdc

Claude Rules - Security

edhoferdianCursor rule

EEF / rules

edhoferdian/EEF/.cursor/rules/code-review-edho-ferdian.mdc

Senior code review across quality, security, performance, spec consistency and tests, with evidence-backed, severity-ranked findings. Load it for any review, even a short snippet or a quick \"is this OK?\". Use for \"review this\", \"cek kode\", \"cek dulu sebelum merge\", \"ada yang salah gak\", \"review PR\", \"find bugs\". Security-only asks go to security-review.

stackroxCursor rule

stackrox / security

stackrox/stackrox/.cursor/rules/security/databases.mdc

Secure coding rules for Databases

No other project uses it yet

affaan-mCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/common-security.md

Security: mandatory checks, secret management, response protocol

anmolnagpalReads credentialsCursor rule

devops-skills / rules

anmolnagpal/devops-skills/.cursor/rules/appsec.mdc

Application-level security review: dependency manifests for known-vulnerable packages, missing HTTP security headers, permissive CORS configuration. Use when user says 'review my dependencies', 'check for vulnerable packages', 'run a dependency audit', 'audit security headers', 'review CORS config', or when working in package.json/package-lock.json, go.mod/go.sum, requirements.txt/poetry.lock, Gemfile.lock, Cargo.toml/Cargo.lock, pom.xml, or server/app config with CORS or header middleware.

stackroxCursor rule

stackrox / security

stackrox/stackrox/.cursor/rules/security/common.mdc

Common secure coding rules for all languages

No other project uses it yet

stackroxCursor rule

stackrox / security

stackrox/stackrox/.cursor/rules/security/containers.mdc

Secure coding rules for Stackrox Containers

No other project uses it yet

stackroxCursor rule

stackrox / security

stackrox/stackrox/.cursor/rules/security/groovy.mdc

Secure coding rules for Groovy projects

No other project uses it yet

stackroxCursor rule

stackrox / security

stackrox/stackrox/.cursor/rules/security/java.mdc

Secure coding rules for Java projects

No other project uses it yet

stackroxCursor rule

stackrox / security

stackrox/stackrox/.cursor/rules/security/javascript.mdc

Secure coding rules for JavaScript projects

No other project uses it yet

stackroxCursor rule

stackrox / security

stackrox/stackrox/.cursor/rules/security/shell.mdc

Secure coding rules for Shell/Bash scripts

No other project uses it yet

stackroxCursor rule

stackrox / security

stackrox/stackrox/.cursor/rules/security/typescript.mdc

Secure coding rules for TypeScript projects

No other project uses it yet

anmolnagpalCursor rule

devops-skills / rules

anmolnagpal/devops-skills/.cursor/rules/owasp.mdc

Security review requiring judgment about exploitability: injection and input handling, authentication and session management, authorization, secret storage and cryptography, and Agentic AI risks, against OWASP Top 10:2025 and ASVS 5.0. Use when user says 'review for security', 'is this secure', 'review this endpoint for injection', 'check for SQL injection or XSS', 'review auth/authorization', 'how are we storing secrets', 'check how we store secrets in this service', 'is this crypto correct', or when writing cryptography, session management, or AI agent code. Judges reachability and impact in this codebase; /clouddrove:appsec owns the deterministic checks a tool can answer (lockfile CVEs, missing headers, wildcard CORS).