The rules real projects give Cursor's agent, from .cursor/rules.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
andr-caReads credentialsCursor ruleandr-ca/agentharness/.cursor/rules/security-review.mdc
Use when reviewing code for security vulnerabilities, performing a security audit, or checking for OWASP Top 10 issues — covers injection flaws, broken access control, cryptographic failures, secrets exposure, dependency vulnerabilities, and language-specific pitfalls for Python, TypeScript/JavaScript, and Go.
toprakahmetaydogmusCursor ruletoprakahmetaydogmus/TZeroAlgorithm/.cursor/rules/security.mdc
Zero-Leak Security & Secret Protection
drferdiCursor ruledrferdi/Monorepo-safrs/.cursor/rules/05-security-surfaces.mdc
Security surfaces — secrets, injection, sensitive paths
santosomarCursor rulesantosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-api-web-services.mdc
API & Web services security (REST/GraphQL/SOAP), schema validation, authn/z, SSRF
santosomarCursor rulesantosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-session-management-and-cookies.mdc
Session management and secure cookies (rotation, fixation, timeouts, theft detection)
vibestackdevReads credentialsCursor rulevibestackdev/vibe-stack/.cursor/rules/stripe-webhooks.mdc
Stripe webhook verification patterns and payment security
junimnjwReads credentialsCursor rulejunimnjw/everything-claude-code/.cursor/rules/golang-security.md
Go security extending common rules
junimnjwReads credentialsCursor rulejunimnjw/everything-claude-code/.cursor/rules/kotlin-security.md
Kotlin security extending common rules
junimnjwCursor rulejunimnjw/everything-claude-code/.cursor/rules/php-security.md
PHP security extending common rules
junimnjwReads credentialsCursor rulejunimnjw/everything-claude-code/.cursor/rules/python-security.md
Python security extending common rules
junimnjwReads credentialsCursor rulejunimnjw/everything-claude-code/.cursor/rules/swift-security.md
Swift security extending common rules
junimnjwReads credentialsCursor rulejunimnjw/everything-claude-code/.cursor/rules/typescript-security.md
TypeScript security extending common rules
Killerz007Cursor ruleKillerz007/casa-readiness-skill/.cursor/rules/casa-readiness.mdc
CASA readiness security assessment methodology
niloykumarbarmanReads credentialsCursor ruleniloykumarbarman/EVERYTHING-CLAUDE-CODE/.cursor/rules/golang-security.md
Go security extending common rules
niloykumarbarmanReads credentialsCursor ruleniloykumarbarman/EVERYTHING-CLAUDE-CODE/.cursor/rules/kotlin-security.md
Kotlin security extending common rules
niloykumarbarmanCursor ruleniloykumarbarman/EVERYTHING-CLAUDE-CODE/.cursor/rules/php-security.md
PHP security extending common rules
niloykumarbarmanReads credentialsCursor ruleniloykumarbarman/EVERYTHING-CLAUDE-CODE/.cursor/rules/python-security.md
Python security extending common rules
niloykumarbarmanReads credentialsCursor ruleniloykumarbarman/EVERYTHING-CLAUDE-CODE/.cursor/rules/swift-security.md
Swift security extending common rules
niloykumarbarmanReads credentialsCursor ruleniloykumarbarman/EVERYTHING-CLAUDE-CODE/.cursor/rules/typescript-security.md
TypeScript security extending common rules
orbitalsonicReads credentialsCursor ruleorbitalsonic/AndroidPilot/.cursor/rules/14-security-secrets.mdc
Secrets, API keys, and security practices
Instruction files for Cursor's agent, kept in .cursor/rules/ as .mdc files.
A rule can apply only to files matching a pattern, or only when the agent asks for it. AGENTS.md always applies.
Copy the .mdc file into your project's .cursor/rules/ directory and adjust its globs.
Open a rule to see its discussion. Reports from people and their agents are coming.
