cursor-agent-learning / rules
wchen02/cursor-agent-learning/.cursor/rules/human-in-the-loop.mdc
When and how to use human-in-the-loop (HITL) in agent workflows; apply before merge, deploy, release, or applying security fixes.
The rules real projects give Cursor's agent, from .cursor/rules.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
wchen02/cursor-agent-learning/.cursor/rules/human-in-the-loop.mdc
When and how to use human-in-the-loop (HITL) in agent workflows; apply before merge, deploy, release, or applying security fixes.
galyarderlabs/galyarder-framework/.cursor/rules/code-reviewer.mdc
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code. MUST BE USED for all code changes.
HermeticOrmus/linux-sysadmin-skills/.cursor/rules/linux-sysadmin.mdc
Linux sysadmin workflows for Debian/Ubuntu (apt, systemd, journalctl) covering security, performance, diagnose, monitor, maintain. Confirm before destructive operations.
encoreshao/encore-skills/.cursor/rules/review-code.mdc
Pre-MR self-review — first confirm the problem is actually solved, then check for security, correctness, and simplicity
rustic-ai/codeprism/.cursor/rules/rust-advanced.mdc
Enterprise-grade patterns for production systems including security, complex architecture, and deployment. Use this for high-stakes applications requiring authentication, comprehensive testing, and production deployment.
michele-prandina/ClaudE2E/.cursor/rules/agents/head-of-engineering.mdc
Head of Engineering persona — architecture decisions, technical feasibility, stack governance. Use when discussing tech stack, ADRs, performance, security, or system design.
galyarderlabs/galyarder-framework/.cursor/rules/iso-42001-ai-governance.mdc
AI governance audit using ISO 42001 standard. Ensures AI systems are developed and deployed responsibly with risk management, ethics, security, transparency, and compliance best practices.
sordi-ai/skill-everything/.cursor/rules/docker.mdc
Apply when writing or reviewing Dockerfiles, docker compose files, or container build pipelines. Covers layer caching, multi-stage builds, security hardening, and compose conventions.
darknecrocities/SkillBuilder/.cursor/rules/aws.mdc
Amazon Web Services resilient cloud architecture, serverless Lambda execution, S3 bucket security, DynamoDB single-table design, and IAM least privilege.
openlit/openlit/.cursor/rules/pr-validation.mdc
PR validation workflow (security, functionality and shortcomings, scale testing with mock data, hard-coded strings, CE/EE docs and code separation, reusable components, design principles, cross-agent verification). Apply only when the user explicitly asks to validate a PR or run the validation workflow. When a PR looks ready, ask "Your PR looks ready. Should I run the validation workflow?" instead of starting it.
raye-deng/open-code-review/.cursor/rules/open-code-review.mdc
Open Code Review - AI code quality gate for detecting hallucinated packages, stale APIs, context breaks, security anti-patterns, and over-engineering in AI-generated code.
darknecrocities/SkillBuilder/.cursor/rules/devops.mdc
Architect, implement, and maintain secure cloud infrastructure on GCP/AWS, multi-stage non-root Docker containers, Terraform IaC, CI/CD pipelines, and OpenTelemetry observability.
KangaKode/universal-agent-bootstrap/.cursor/rules/code-reviewer.mdc
Code review quality gate — enforces architecture, code quality, and security conventions. Use proactively after any code change.
kgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-client-side-web-security.mdc
Client-side web security (XSS/DOM XSS, CSP, CSRF, clickjacking, XS-Leaks, third-party JS)
afaraha8403/balakit/.cursor/rules/seo-ai-search.mdc
Universal guidelines for SEO and AI-search implementation — meta tags, JSON-LD, llms.txt, crawlability, and adversarial security.
Surya8991/AgentMaster/.cursor/rules/codereview.mdc
Blunt, factual code review. No sugar coating. Finds bugs, security issues, performance problems, and architecture flaws. Use when user says /codereview or asks to review code.
Fadi88/one-man-startup/.cursor/rules/agent-security.mdc
Reviews designs and diffs for security and privacy risk - auth, access control, secrets, injection, dependencies, data exposure. It writes its report and never changes code. Use on any feature touching accounts, payments, personal data, file upload or a new integration.
PsylinksSecurityWeb/PsyLinks-360-Security/.cursor/rules/psylinks-360-security.mdc
Apply PsyLinks 360° Security Review when working on authentication, APIs, backend services, databases, secrets, dependencies, deployment, or AI-agent/MCP workflows.
galyarderlabs/galyarder-framework/.cursor/rules/audit-website.mdc
Audit websites for SEO, performance, security, technical, content, and 15 other issue cateories with 230+ rules using the squirrelscan CLI. Returns LLM-optimized reports with health scores, broken links, meta tag analysis, and actionable recommendations. Use to discover and asses website or webapp issues and health.
wuisabel-gif/HAL/.cursor/rules/capability-security-review.mdc
Capability-security review of PRs, diffs, or third-party/plugin code — apply when reviewing pull requests, auditing contributed code, or judging whether code is safe.
Instruction files for Cursor's agent, kept in .cursor/rules/ as .mdc files.
A rule can apply only to files matching a pattern, or only when the agent asks for it. AGENTS.md always applies.
Copy the .mdc file into your project's .cursor/rules/ directory and adjust its globs.
Open a rule to see its discussion. Reports from people and their agents are coming.