cursorrules / rules
ivangrynenko/cursorrules/.cursor/rules/security-practices.mdc
Security best practices for PHP, JavaScript, and Drupal
The rules real projects give Cursor's agent, from .cursor/rules.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
ivangrynenko/cursorrules/.cursor/rules/security-practices.mdc
Security best practices for PHP, JavaScript, and Drupal
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-1-crypto-algorithms.mdc
Cryptographic Security Guidelines & Post-Quantum Readiness
christopherpaquin/Guardrails-AI/.cursor/rules/006_security.mdc
Security requirements and secret handling
truefoundry/tfy-deploy-skills/.cursor/rules/security.mdc
Security rules for TrueFoundry deployments
brianonbased-dev/HoloScript/.cursor/rules/holodoor-security.mdc
HoloDoor security guardrails (replaces Corridor)
DataDog/dd-trace-py/.cursor/rules/iast.mdc
IAST (Interactive Application Security Testing) - How it works and development guidelines
jimmypocock/cursor-rules/.cursor/rules/aws-iam.mdc
AWS IAM Security Best Practices
vibestackdev/vibe-stack/.cursor/rules/supabase-rls.mdc
Supabase Row Level Security enforcement
ahtishamshahzad/backend-security-audit-skill/.cursor/rules/backend-security.mdc
Backend security — audit, fix, and verify secrets, PII, auth, authorization/IDOR, injection, payments, and production hardening. Triggers on API/route/controller/middleware/auth/DB/webhook or config work, or when handling a pre-launch security review.
Consensys/linea-monorepo/.cursor/rules/security-logging-guidelines/EXAMPLES.md
Security-Sensitive Information Logging Prevention - Examples
Consensys/linea-monorepo/.cursor/rules/security-logging-guidelines/RULES.md
Security-Sensitive Information Logging Prevention - Rules
mrcbrbn5361/SyncytiumMD/.cursor/rules/security.mdc
Security rules, secrets handling, and sanitization
cisco-ai-defense/skill-scanner/.cursor/rules/codeguard-0-mobile-apps.mdc
Mobile app security (iOS/Android): storage, transport, code integrity, biometrics, permissions
Steady19 mentions in 2 weeks
1 project uses a version of this
cisco-ai-defense/skill-scanner/.cursor/rules/codeguard-0-supply-chain-security.mdc
Dependency & supply chain security (pinning, SBOM, provenance, integrity, private registries)
Steady19 mentions in 2 weeks
1 project uses a version of this
enuno/unifi-mcp-server/.cursor/rules/core-principles.mdc
Core coding principles for async-first development and security
NVIDIA/Personal-AI-Router/.cursor/rules/security.mdc
Security ownership boundary — the backend owns all cluster trust; PAIR implements none
NVIDIA/Personal-AI-Router/.cursor/rules/system-architecture.mdc
Current PAIR runtime architecture, communication paths, modular services, and security boundaries
MuhammedZohaib/patchman/.cursor/rules/patchman.mdc
Patchman defensive security review defaults
Surya8991/AgentMaster/.cursor/rules/security-audit.mdc
Security auditing skill for web applications and codebases. Scans for OWASP Top 10, dependency vulnerabilities, secrets exposure, XSS/CSRF/injection flaws, auth weaknesses, and misconfigurations. Use when task involves security scan, vulnerability assessment, pen test review, threat modeling, or hardening a codebase.
cisco-ai-defense/skill-scanner/.cursor/rules/codeguard-0-framework-and-languages.mdc
Framework & language security guides (Django/DRF, Laravel/Symfony/Rails, .NET, Java/JAAS, Node.js, PHP config)
Steady19 mentions in 2 weeks
1 project uses a version of this
Instruction files for Cursor's agent, kept in .cursor/rules/ as .mdc files.
A rule can apply only to files matching a pattern, or only when the agent asks for it. AGENTS.md always applies.
Copy the .mdc file into your project's .cursor/rules/ directory and adjust its globs.
Open a rule to see its discussion. Reports from people and their agents are coming.