kotro-labsCursor rulekotro-proxy-engine / rules
kotro-labs/kotro-proxy-engine/.cursor/rules/week1-distribution.mdc
Guide Kotro Week 1 distribution plan to completion (security tiles → exploit demo → Show HN)
Cursor rules examples
The rules real projects give Cursor's agent, from .cursor/rules.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Best matches · from page 9Worked for most · soon
kotro-labsCursor rule
Ghost7802Cursor ruleawesome-agent-skills / rules
Ghost7802/awesome-agent-skills/.cursor/rules/supabase-postgres-rls.mdc
Enforces complete RLS protection across all tables and audited PL/pgSQL security definer functions.
kgrizz-gitCursor ruleAgentsConfigHelper / rules
kgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-data-storage.mdc
Data & storage security (DB isolation, TLS, least privilege, RLS/CLS, backups, auditing)
kgrizz-gitCursor ruleAgentsConfigHelper / rules
kgrizz-git/AgentsConfigHelper/.cursor/rules/codeguard-0-xml-and-serialization.mdc
XML security and safe deserialization (DTD/XXE hardening, schema validation, no unsafe native deserialization)
krutikJainCursor ruleandroid-agent-skills / rules
krutikJain/android-agent-skills/.cursor/rules/android-security-best-practices.mdc
Apply Android app security guidance around secrets, storage, network trust, exported components, and least privilege.
darknecrocitiesReads credentialsCursor ruleSkillBuilder / rules
darknecrocities/SkillBuilder/.cursor/rules/supabase.mdc
Supabase fullstack architecture, PostgreSQL Row Level Security (RLS), Supabase Auth, Edge Functions, and pgvector embeddings.
tethertoPipes a download into a shellCursor ruleqvac / rules
tetherto/qvac/.cursor/rules/no-remote-code-execution.mdc
Repo-wide security guardrail — agents, skills, and hooks must never fetch and execute code from an external link (curl | bash, iwr | iex, download-then-run). Applies to all QVAC pods and surfaces.
amitchorasiyaCursor ruleantivibe-rails-starter / rules
amitchorasiya/antivibe-rails-starter/.cursor/rules/security.mdc
Security architecture rails (AntiVibe) — non-negotiable constraints for all code generation
darknecrocitiesCursor ruleSkillBuilder / rules
darknecrocities/SkillBuilder/.cursor/rules/firebase.mdc
Firebase serverless architecture, Cloud Firestore schema design, Security Rules (firestore.rules, storage.rules), Firebase Auth, and Admin SDK.
rustic-aiCursor rulecodeprism / rules
rustic-ai/codeprism/.cursor/rules/kubernetes.mdc
This rule provides comprehensive best practices for developing and maintaining Kubernetes applications and infrastructure, covering coding standards, security, performance, testing, and deployment.
decionisCursor ruleagent-safe-pipeline / rules
decionis/agent-safe-pipeline/.cursor/rules/PolicyAuthoring.mdc
Turn plain-English rules from risk, security, compliance and audit teams into PolicyAgent proposals: clarify vague terms, read the rule back, propose through the Decionis policy tools, and leave approval to independent people in the workspace.
galyarderlabsCursor rulegalyarder-framework / rules
galyarderlabs/galyarder-framework/.cursor/rules/code-review-expert.mdc
Expert code review of current git changes with a senior engineer lens. Detects SOLID violations, security risks, and proposes actionable improvements.
galyarderlabsReads credentialsCursor rulegalyarder-framework / rules
galyarderlabs/galyarder-framework/.cursor/rules/pr-review-expert.mdc
Use when the user asks to review pull requests, analyze code changes, check for security issues in PRs, or assess code quality of diffs.
galyarderlabsCursor rulegalyarder-framework / rules
galyarderlabs/galyarder-framework/.cursor/rules/testing-for-xss-vulnerabilities-with-burpsuite.mdc
Identifying and validating cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.
sordi-aiCursor ruleskill-everything / rules
sordi-ai/skill-everything/.cursor/rules/code-quality.mdc
Apply when writing or refactoring code. Generic rules to prevent the most common review comments — function length, naming, error handling, security, and tooling.
sakurablushCursor rulezeroagent-studio / rules
sakurablush/zeroagent-studio/.cursor/rules/zeroagent-security-auditor.mdc
Security audit for ZeroAgent Studio. Use when reviewing API keys, scraped content, CORS proxies, speech, or dependencies.
wchen02Cursor rulecursor-agent-learning / rules
wchen02/cursor-agent-learning/.cursor/rules/human-in-the-loop.mdc
When and how to use human-in-the-loop (HITL) in agent workflows; apply before merge, deploy, release, or applying security fixes.
darknecrocitiesReads credentialsCursor ruleSkillBuilder / rules
darknecrocities/SkillBuilder/.cursor/rules/security.mdc
Security hardening and vulnerability defense skill. Enforces OWASP Top 10 mitigations, zero hardcoded secrets, input sanitization, and SQL parameterization.
darknecrocitiesReads credentialsCursor ruleSkillBuilder / rules
darknecrocities/SkillBuilder/.cursor/rules/world-class-engineering.mdc
A rigorous engineering skill for architecture, implementation, refactoring, AI/ML integration, testing, security, code review, and production-quality software delivery.
galyarderlabsCursor rulegalyarder-framework / rules
galyarderlabs/galyarder-framework/.cursor/rules/code-reviewer.mdc
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code. MUST BE USED for all code changes.
About cursor rules
What are cursor rules?
Instruction files for Cursor's agent, kept in .cursor/rules/ as .mdc files.
How are they different from AGENTS.md?
A rule can apply only to files matching a pattern, or only when the agent asks for it. AGENTS.md always applies.
How do I use one?
Copy the .mdc file into your project's .cursor/rules/ directory and adjust its globs.
Which ones worked?
Open a rule to see its discussion. Reports from people and their agents are coming.