vibestackdevReads credentialsCursor rulevibe-stack / rules
vibestackdev/vibe-stack/.cursor/rules/security.mdc
Security rules and OWASP Top 10 enforcement for AI-generated code
Cursor rules examples
The rules real projects give Cursor's agent, from .cursor/rules.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Best matches · from page 8Worked for most · soon
vibestackdevReads credentialsCursor rule
ivangrynenkoReads credentialsCursor rulecursorrules / rules
ivangrynenko/cursorrules/.cursor/rules/javascript-security-logging-monitoring-failures.mdc
Detect and prevent security logging and monitoring failures in JavaScript applications as defined in OWASP Top 10:2021-A09
ivangrynenkoCursor rulecursorrules / rules
ivangrynenko/cursorrules/.cursor/rules/python-logging-monitoring-failures.mdc
Detect and prevent security logging and monitoring failures in Python applications as defined in OWASP Top 10:2021-A09
kgrizz-gitCursor ruleAgentsConfigHelper / rules
kgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-api-web-services.mdc
API & Web services security (REST/GraphQL/SOAP), schema validation, authn/z, SSRF
kgrizz-gitCursor ruleAgentsConfigHelper / rules
kgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-session-management-and-cookies.mdc
Session management and secure cookies (rotation, fixation, timeouts, theft detection)
santosomarCursor ruleAI-agents-for-cybersecurity / rules
santosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-client-side-web-security.mdc
Client-side web security (XSS/DOM XSS, CSP, CSRF, clickjacking, XS-Leaks, third-party JS)
asap-protocolReads credentialsCursor ruleasap-protocol / rules
asap-protocol/asap-protocol/.cursor/rules/security-standards.mdc
Security standards for code quality, secret management, and input validation. Apply to all Python and TypeScript files.
DevInder1Cursor rulesupply-chain-scanner-public / rules
DevInder1/supply-chain-scanner-public/.cursor/rules/tridentchain.mdc
TridentChain Security — supply-chain vulnerability scanning for this workspace
pr-pmCursor ruleprpm / rules
pr-pm/prpm/.cursor/rules/creating-kiro-agents.mdc
Kiro agent configuration patterns, JSON structure, tool permissions, and security best practices for creating specialized AI development assistants
chimera-defiCursor ruleeth2-quickstart / rules
chimera-defi/eth2-quickstart/.cursor/rules/shell-scripts.mdc
Shell script rules - common functions, shellcheck, two-phase security
kgrizz-gitCursor ruleAgentsConfigHelper / rules
kgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-file-handling-and-uploads.mdc
Secure file handling & uploads (validation, storage isolation, scanning, safe delivery)
LuxvilCursor ruleai-coding-rules / rules
Luxvil/ai-coding-rules/.cursor/rules/20-security-privacy.mdc
USE WHEN: handling auth, secrets, PII, input validation, or security-sensitive code.
tyecodeCursor ruleskills / rules
tyecode/skills/.cursor/rules/karpathy-guidelines.mdc
Tyecode's coding guidelines — think before coding, simplicity, security, and surgical changes.
moxnoCursor ruleztds.ai / rules
moxno/ztds.ai/.cursor/rules/ztds.mdc
ZTDS Local Security Firewall - Automatic In-RAM PII & Secret Sanitization
kotro-labsCursor rulekotro-proxy-engine / rules
kotro-labs/kotro-proxy-engine/.cursor/rules/week1-distribution.mdc
Guide Kotro Week 1 distribution plan to completion (security tiles → exploit demo → Show HN)
Ghost7802Cursor ruleawesome-agent-skills / rules
Ghost7802/awesome-agent-skills/.cursor/rules/supabase-postgres-rls.mdc
Enforces complete RLS protection across all tables and audited PL/pgSQL security definer functions.
kgrizz-gitCursor ruleAgentsConfigHelper / rules
kgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-data-storage.mdc
Data & storage security (DB isolation, TLS, least privilege, RLS/CLS, backups, auditing)
kgrizz-gitCursor ruleAgentsConfigHelper / rules
kgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-xml-and-serialization.mdc
XML security and safe deserialization (DTD/XXE hardening, schema validation, no unsafe native deserialization)
krutikJainCursor ruleandroid-agent-skills / rules
krutikJain/android-agent-skills/.cursor/rules/android-security-best-practices.mdc
Apply Android app security guidance around secrets, storage, network trust, exported components, and least privilege.
darknecrocitiesReads credentialsCursor ruleSkillBuilder / rules
darknecrocities/SkillBuilder/.cursor/rules/supabase.mdc
Supabase fullstack architecture, PostgreSQL Row Level Security (RLS), Supabase Auth, Edge Functions, and pgvector embeddings.
About cursor rules
What are cursor rules?
Instruction files for Cursor's agent, kept in .cursor/rules/ as .mdc files.
How are they different from AGENTS.md?
A rule can apply only to files matching a pattern, or only when the agent asks for it. AGENTS.md always applies.
How do I use one?
Copy the .mdc file into your project's .cursor/rules/ directory and adjust its globs.
Which ones worked?
Open a rule to see its discussion. Reports from people and their agents are coming.