santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-session-management-and-cookies.mdc
Session management and secure cookies (rotation, fixation, timeouts, theft detection)
Cursor rules examples
The rules real projects give Cursor's agent, from .cursor/rules.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Best matches · from page 4Worked for most · soon
santosomarCursor rule
junimnjwCursor ruleeverything-claude-code / rules
junimnjw/everything-claude-code/.cursor/rules/php-security.md
PHP security extending common rules
Killerz007Cursor rulecasa-readiness-skill / rules
Killerz007/casa-readiness-skill/.cursor/rules/casa-readiness.mdc
CASA readiness security assessment methodology
niloykumarbarmanCursor ruleEVERYTHING-CLAUDE-CODE / rules
niloykumarbarman/EVERYTHING-CLAUDE-CODE/.cursor/rules/php-security.md
PHP security extending common rules
rishapgandhiCursor rulepython-skills / rules
rishapgandhi/python-skills/.cursor/rules/python-security.mdc
Security rules — always active for all Python files
lacymorrowCursor rulepaperclip-hub / rules
lacymorrow/paperclip-hub/.cursor/rules/supabase-db-rls.mdc
Guidelines for writing Postgres Row Level Security policies
DataDogCursor ruledd-trace-py / rules
DataDog/dd-trace-py/.cursor/rules/isolated-responsibility.mdc
Isolated responsibility - keep security products decoupled from contrib integrations via core events
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-file-handling-and-uploads.mdc
Secure file handling & uploads (validation, storage isolation, scanning, safe delivery)
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-mobile-apps.mdc
Mobile app security (iOS/Android): storage, transport, code integrity, biometrics, permissions
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-supply-chain-security.mdc
Dependency & supply chain security (pinning, SBOM, provenance, integrity, private registries)
mchittineniCursor rulecloud-platform-skills / skills
mchittineni/cloud-platform-skills/.cursor/rules/skills/cloud-security-posture-cspm-cis.mdc
Cloud Security Posture Management: Prowler and ScoutSuite multi-cloud audits, CIS Benchmark baselines for AWS, Azure and GCP, over-permissive IAM discovery, and exception workflow. Use when auditing an account or organization's security posture, finding unused and over-permissive permissions across hundreds of roles, preparing for a CIS or compliance review, or triaging misconfiguration findings.
justinz12xdCursor ruleHACKATON-TAWS / rules
justinz12xd/HACKATON-TAWS/.cursor/rules/supabase-safety.mdc
Supabase migration, RLS and data security constraints
vibestackdevCursor rulevibe-stack / rules
vibestackdev/vibe-stack/.cursor/rules/supabase-auth-security.mdc
Supabase auth security — enforces getUser() over getSession() on the server
tounsilsCursor ruleclaude-code-skills / rules
tounsils/claude-code-skills/.cursor/rules/audit-security.mdc
Security review of a change or working tree against the OWASP Top 10: committed secrets, injection, broken access control, SSRF, insecure deserialization, permissive CORS, vulnerable dependencies, and sensitive data in logs. Reports exploitability, not category names. Use when asked to security review this, audit for vulnerabilities, check this is safe to ship, or before pushing code that touches auth, user input, or data access.
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-data-storage.mdc
Data & storage security (DB isolation, TLS, least privilege, RLS/CLS, backups, auditing)
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-framework-and-languages.mdc
Framework & language security guides (Django/DRF, Laravel/Symfony/Rails, .NET, Java/JAAS, Node.js, PHP config)
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-xml-and-serialization.mdc
XML security and safe deserialization (DTD/XXE hardening, schema validation, no unsafe native deserialization)
cbtw-apacCursor ruleqdrant-loader / rules
cbtw-apac/qdrant-loader/.cursor/rules/security-expert.mdc
Guide the AI to act as a Security Expert, focusing on code and infrastructure auditing.
SafetyMPCursor ruleHR-ERP / rules
SafetyMP/HR-ERP/.cursor/rules/agent-security.mdc
Security agent — identity, RLS, merge bar
XenonesisCursor rulevibe-audit / rules
Xenonesis/vibe-audit/.cursor/rules/vibe-audit.mdc
Vibe Audit security, correctness, and readiness rules
About cursor rules
What are cursor rules?
Instruction files for Cursor's agent, kept in .cursor/rules/ as .mdc files.
How are they different from AGENTS.md?
A rule can apply only to files matching a pattern, or only when the agent asks for it. AGENTS.md always applies.
How do I use one?
Copy the .mdc file into your project's .cursor/rules/ directory and adjust its globs.
Which ones worked?
Open a rule to see its discussion. Reports from people and their agents are coming.