simstudioaiReads credentialsCursor rulesim / rules
simstudioai/sim/.cursor/rules/sim-sandbox.mdc
Isolated-vm sandbox worker security policy. Hard rules for anything that lives in the worker child process that runs user code.
Cursor rules examples
The rules real projects give Cursor's agent, from .cursor/rules.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Best matches · from page 6Worked for most · soon
simstudioaiReads credentialsCursor rule
lacymorrowCursor rulepaperclip-hub / rules
lacymorrow/paperclip-hub/.cursor/rules/supabase-db-rls.mdc
Guidelines for writing Postgres Row Level Security policies
DataDogCursor ruledd-trace-py / rules
DataDog/dd-trace-py/.cursor/rules/isolated-responsibility.mdc
Isolated responsibility - keep security products decoupled from contrib integrations via core events
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-file-handling-and-uploads.mdc
Secure file handling & uploads (validation, storage isolation, scanning, safe delivery)
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-mobile-apps.mdc
Mobile app security (iOS/Android): storage, transport, code integrity, biometrics, permissions
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-supply-chain-security.mdc
Dependency & supply chain security (pinning, SBOM, provenance, integrity, private registries)
mchittineniCursor rulecloud-platform-skills / skills
mchittineni/cloud-platform-skills/.cursor/rules/skills/cloud-security-posture-cspm-cis.mdc
Cloud Security Posture Management: Prowler and ScoutSuite multi-cloud audits, CIS Benchmark baselines for AWS, Azure and GCP, over-permissive IAM discovery, and exception workflow. Use when auditing an account or organization's security posture, finding unused and over-permissive permissions across hundreds of roles, preparing for a CIS or compliance review, or triaging misconfiguration findings.
bybren-llcDeletes or force-pushesCursor rulesafe-agentic-workflow / rules
bybren-llc/safe-agentic-workflow/.cursor/rules/12-database-sql.mdc
Database rules for PostgreSQL 16, Alembic migrations, SQLAlchemy models, and Row Level Security.
justinz12xdCursor ruleHACKATON-TAWS / rules
justinz12xd/HACKATON-TAWS/.cursor/rules/supabase-safety.mdc
Supabase migration, RLS and data security constraints
vibestackdevCursor rulevibe-stack / rules
vibestackdev/vibe-stack/.cursor/rules/supabase-auth-security.mdc
Supabase auth security — enforces getUser() over getSession() on the server
tounsilsCursor ruleclaude-code-skills / rules
tounsils/claude-code-skills/.cursor/rules/audit-security.mdc
Security review of a change or working tree against the OWASP Top 10: committed secrets, injection, broken access control, SSRF, insecure deserialization, permissive CORS, vulnerable dependencies, and sensitive data in logs. Reports exploitability, not category names. Use when asked to security review this, audit for vulnerabilities, check this is safe to ship, or before pushing code that touches auth, user input, or data access.
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-data-storage.mdc
Data & storage security (DB isolation, TLS, least privilege, RLS/CLS, backups, auditing)
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-framework-and-languages.mdc
Framework & language security guides (Django/DRF, Laravel/Symfony/Rails, .NET, Java/JAAS, Node.js, PHP config)
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-xml-and-serialization.mdc
XML security and safe deserialization (DTD/XXE hardening, schema validation, no unsafe native deserialization)
cbtw-apacCursor ruleqdrant-loader / rules
cbtw-apac/qdrant-loader/.cursor/rules/security-expert.mdc
Guide the AI to act as a Security Expert, focusing on code and infrastructure auditing.
SafetyMPCursor ruleHR-ERP / rules
SafetyMP/HR-ERP/.cursor/rules/agent-security.mdc
Security agent — identity, RLS, merge bar
XenonesisCursor rulevibe-audit / rules
Xenonesis/vibe-audit/.cursor/rules/vibe-audit.mdc
Vibe Audit security, correctness, and readiness rules
first-flukeCursor rulefullstack-starter / rules
first-fluke/fullstack-starter/.cursor/rules/quality.mdc
Quality assurance standards for security (OWASP), performance, accessibility (WCAG), and code quality reviews
nitinjain999Cursor ruleplatform-skills / rules
nitinjain999/platform-skills/.cursor/rules/kubernetes.mdc
Kubernetes and OpenShift workload generation rules — security defaults, resource limits, probes
gygantskiyMatilyockCursor ruleios-developer-agents / rules
gygantskiyMatilyock/ios-developer-agents/.cursor/rules/ios-security-auditor.mdc
Security audit for iOS projects (OWASP Mobile Top 10 2024)
About cursor rules
What are cursor rules?
Instruction files for Cursor's agent, kept in .cursor/rules/ as .mdc files.
How are they different from AGENTS.md?
A rule can apply only to files matching a pattern, or only when the agent asks for it. AGENTS.md always applies.
How do I use one?
Copy the .mdc file into your project's .cursor/rules/ directory and adjust its globs.
Which ones worked?
Open a rule to see its discussion. Reports from people and their agents are coming.