Cursor rules examples

alibabaCursor rule

loongcollector / review-standards

alibaba/loongcollector/.cursor/rules/review-standards/code-review.mdc

Code Review Rule. Use this rule when you need expert code review for quality, security, and maintainability. This rule should be used proactively after writing logical chunks of code, before merging pull requests, or when explicitly asked to review code. Example: After implementing a new feature in a Go plugin, use this rule to review the code for potential issues. Example: When asked '请对 PR 1234 进行代码评审', 'Code Review fork/feature/x', '将 fork/feature/x 对比 main 进行CR' use this rule to perform a thorough security-focused review.

xu-xiangReads credentialsCursor rule

everything-claude-code-zh / rules

xu-xiang/everything-claude-code-zh/.cursor/rules/python-security.md

Python 安全规范，扩展通用安全规则 (Python security extending common rules)

No other project uses it yet

cisco-ai-defenseCursor rule

skill-scanner / rules

cisco-ai-defense/skill-scanner/.cursor/rules/codeguard-0-mobile-apps.mdc

Mobile app security (iOS/Android): storage, transport, code integrity, biometrics, permissions

cisco-ai-defenseCursor rule

skill-scanner / rules

cisco-ai-defense/skill-scanner/.cursor/rules/codeguard-0-supply-chain-security.mdc

Dependency & supply chain security (pinning, SBOM, provenance, integrity, private registries)

NVIDIACursor rule

Personal-AI-Router / rules

NVIDIA/Personal-AI-Router/.cursor/rules/security.mdc

Security ownership boundary — the backend owns all cluster trust; PAIR implements none

NVIDIACursor rule

Personal-AI-Router / rules

NVIDIA/Personal-AI-Router/.cursor/rules/system-architecture.mdc

Current PAIR runtime architecture, communication paths, modular services, and security boundaries

cisco-ai-defenseCursor rule

skill-scanner / rules

cisco-ai-defense/skill-scanner/.cursor/rules/codeguard-0-framework-and-languages.mdc

Framework & language security guides (Django/DRF, Laravel/Symfony/Rails, .NET, Java/JAAS, Node.js, PHP config)

simstudioaiReads credentialsCursor rule

sim / rules

simstudioai/sim/.cursor/rules/sim-sandbox.mdc

Isolated-vm sandbox worker security policy. Hard rules for anything that lives in the worker child process that runs user code.

No other project uses it yet

openlitCursor rule

openlit / rules

openlit/openlit/.cursor/rules/pr-validation.mdc

PR validation workflow (security, functionality and shortcomings, scale testing with mock data, hard-coded strings, CE/EE docs and code separation, reusable components, design principles, cross-agent verification). Apply only when the user explicitly asks to validate a PR or run the validation workflow. When a PR looks ready, ask "Your PR looks ready. Should I run the validation workflow?" instead of starting it.

affaan-mCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/common-agents.md

Agent orchestration: available agents, parallel execution, multi-perspective analysis

affaan-mCursor rule

ECC / rules

affaan-m/ECC/.cursor/rules/common-patterns.md

Common patterns: repository, API response, skeleton projects

DietrichGebertCursor rule

ponytail / rules

DietrichGebert/ponytail/.cursor/rules/ponytail.mdc

Ponytail, lazy senior dev mode. Always pick the simplest solution that works.

No other project uses it yet

apacheCursor rule

superset / rules

apache/superset/.cursor/rules/dev-standard.mdc

Apache Superset development standards and guidelines for Cursor IDE

No other project uses it yet

maybe-financeCursor rule

maybe / rules

maybe-finance/maybe/.cursor/rules/project-design.mdc

This rule explains the system architecture and data flow of the Rails app

streamlitCursor rule

streamlit / rules

streamlit/streamlit/.cursor/rules/agents.mdc

testing-feature` | QA test features using Playwright | | `reviewing-local-changes` | Code review for quality, security, best practices, and product/API alignment | | `simplifying-local-changes` | Simplify and refine code changes

No other project uses it yet

streamlitCursor rule

streamlit / rules

streamlit/streamlit/.cursor/rules/overview.mdc

clear error, a short doc note, or leaving the code as is. Security issues and data loss still need a real fix. This applies to review feedback too: a reviewer

No other project uses it yet

streamlitCursor rule

streamlit / rules

streamlit/streamlit/.cursor/rules/python_lib.mdc

Production code must remain compatible with Python/OpenSSL environments running in FIPS mode. - For non-security hashing, use `streamlit.util.create_fast_hasher` (incremental hashing) or `calc_hash` (one-shot string/bytes hashing) instead

No other project uses it yet

streamlitReads credentialsCursor rule

streamlit / rules

streamlit/streamlit/.cursor/rules/workflows.mdc

snapshots | | `spec-validation.yml` | PR with `change:spec` label | Validates product spec PRs in `specs/` directory | ### Security & Analysis | Workflow | Trigger | Description | |----------|---------|-------------| | `codeql-analysis.yml` | Push/PR to `develop`, weekly | GitHub CodeQL security scanning

No other project uses it yet

appsmithorgReads credentialsCursor rule

appsmith / build

appsmithorg/appsmith/.cursor/rules/build/docker.mdc

Docker image optimization — minimal base images, layer caching, multi-stage builds, and size reduction

eyaltoledanoCursor rule

claude-task-master / rules

eyaltoledano/claude-task-master/.cursor/rules/self_improve.mdc

Guidelines for continuously improving Cursor rules based on emerging code patterns and best practices.