The rules real projects give Cursor's agent, from .cursor/rules.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
ivangrynenkoReads credentialsCursor ruleivangrynenko/cursorrules/.cursor/rules/javascript-security-logging-monitoring-failures.mdc
Detect and prevent security logging and monitoring failures in JavaScript applications as defined in OWASP Top 10:2021-A09
ivangrynenkoCursor ruleivangrynenko/cursorrules/.cursor/rules/python-logging-monitoring-failures.mdc
Detect and prevent security logging and monitoring failures in Python applications as defined in OWASP Top 10:2021-A09
kgrizz-gitCursor rulekgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-api-web-services.mdc
API & Web services security (REST/GraphQL/SOAP), schema validation, authn/z, SSRF
kgrizz-gitCursor rulekgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-session-management-and-cookies.mdc
Session management and secure cookies (rotation, fixation, timeouts, theft detection)
santosomarCursor rulesantosomar/AI-agents-for-cybersecurity/.cursor/rules/codeguard-0-client-side-web-security.mdc
Client-side web security (XSS/DOM XSS, CSP, CSRF, clickjacking, XS-Leaks, third-party JS)
asap-protocolReads credentialsCursor ruleasap-protocol/asap-protocol/.cursor/rules/security-standards.mdc
Security standards for code quality, secret management, and input validation. Apply to all Python and TypeScript files.
DevInder1Cursor ruleDevInder1/supply-chain-scanner-public/.cursor/rules/tridentchain.mdc
TridentChain Security — supply-chain vulnerability scanning for this workspace
pr-pmCursor rulepr-pm/prpm/.cursor/rules/creating-kiro-agents.mdc
Kiro agent configuration patterns, JSON structure, tool permissions, and security best practices for creating specialized AI development assistants
chimera-defiCursor rulechimera-defi/eth2-quickstart/.cursor/rules/shell-scripts.mdc
Shell script rules - common functions, shellcheck, two-phase security
kgrizz-gitCursor rulekgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-file-handling-and-uploads.mdc
Secure file handling & uploads (validation, storage isolation, scanning, safe delivery)
LuxvilCursor ruleLuxvil/ai-coding-rules/.cursor/rules/20-security-privacy.mdc
USE WHEN: handling auth, secrets, PII, input validation, or security-sensitive code.
tyecodeCursor ruletyecode/skills/.cursor/rules/karpathy-guidelines.mdc
Tyecode's coding guidelines — think before coding, simplicity, security, and surgical changes.
kotro-labsCursor rulekotro-labs/kotro-proxy-engine/.cursor/rules/week1-distribution.mdc
Guide Kotro Week 1 distribution plan to completion (security tiles → exploit demo → Show HN)
Ghost7802Cursor ruleGhost7802/awesome-agent-skills/.cursor/rules/supabase-postgres-rls.mdc
Enforces complete RLS protection across all tables and audited PL/pgSQL security definer functions.
kgrizz-gitCursor rulekgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-data-storage.mdc
Data & storage security (DB isolation, TLS, least privilege, RLS/CLS, backups, auditing)
kgrizz-gitCursor rulekgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-xml-and-serialization.mdc
XML security and safe deserialization (DTD/XXE hardening, schema validation, no unsafe native deserialization)
krutikJainCursor rulekrutikJain/android-agent-skills/.cursor/rules/android-security-best-practices.mdc
Apply Android app security guidance around secrets, storage, network trust, exported components, and least privilege.
darknecrocitiesReads credentialsCursor ruledarknecrocities/SkillBuilder/.cursor/rules/supabase.mdc
Supabase fullstack architecture, PostgreSQL Row Level Security (RLS), Supabase Auth, Edge Functions, and pgvector embeddings.
tethertoPipes a download into a shellCursor ruletetherto/qvac/.cursor/rules/no-remote-code-execution.mdc
Repo-wide security guardrail — agents, skills, and hooks must never fetch and execute code from an external link (curl | bash, iwr | iex, download-then-run). Applies to all QVAC pods and surfaces.
amitchorasiyaCursor ruleamitchorasiya/antivibe-rails-starter/.cursor/rules/security.mdc
Security architecture rails (AntiVibe) — non-negotiable constraints for all code generation
Instruction files for Cursor's agent, kept in .cursor/rules/ as .mdc files.
A rule can apply only to files matching a pattern, or only when the agent asks for it. AGENTS.md always applies.
Copy the .mdc file into your project's .cursor/rules/ directory and adjust its globs.
Open a rule to see its discussion. Reports from people and their agents are coming.
