The rules real projects give Cursor's agent, from .cursor/rules.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
tethertoPipes a download into a shellCursor ruletetherto/qvac/.cursor/rules/no-remote-code-execution.mdc
Repo-wide security guardrail — agents, skills, and hooks must never fetch and execute code from an external link (curl | bash, iwr | iex, download-then-run). Applies to all QVAC pods and surfaces.
amitchorasiyaCursor ruleamitchorasiya/antivibe-rails-starter/.cursor/rules/security.mdc
Security architecture rails (AntiVibe) — non-negotiable constraints for all code generation
darknecrocitiesCursor ruledarknecrocities/SkillBuilder/.cursor/rules/firebase.mdc
Firebase serverless architecture, Cloud Firestore schema design, Security Rules (firestore.rules, storage.rules), Firebase Auth, and Admin SDK.
rustic-aiCursor rulerustic-ai/codeprism/.cursor/rules/kubernetes.mdc
This rule provides comprehensive best practices for developing and maintaining Kubernetes applications and infrastructure, covering coding standards, security, performance, testing, and deployment.
galyarderlabsCursor rulegalyarderlabs/galyarder-framework/.cursor/rules/code-review-expert.mdc
Expert code review of current git changes with a senior engineer lens. Detects SOLID violations, security risks, and proposes actionable improvements.
galyarderlabsReads credentialsCursor rulegalyarderlabs/galyarder-framework/.cursor/rules/pr-review-expert.mdc
Use when the user asks to review pull requests, analyze code changes, check for security issues in PRs, or assess code quality of diffs.
galyarderlabsCursor rulegalyarderlabs/galyarder-framework/.cursor/rules/testing-for-xss-vulnerabilities-with-burpsuite.mdc
Identifying and validating cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.
sordi-aiCursor rulesordi-ai/skill-everything/.cursor/rules/code-quality.mdc
Apply when writing or refactoring code. Generic rules to prevent the most common review comments — function length, naming, error handling, security, and tooling.
sakurablushCursor rulesakurablush/zeroagent-studio/.cursor/rules/zeroagent-security-auditor.mdc
Security audit for ZeroAgent Studio. Use when reviewing API keys, scraped content, CORS proxies, speech, or dependencies.
wchen02Cursor rulewchen02/cursor-agent-learning/.cursor/rules/human-in-the-loop.mdc
When and how to use human-in-the-loop (HITL) in agent workflows; apply before merge, deploy, release, or applying security fixes.
darknecrocitiesReads credentialsCursor ruledarknecrocities/SkillBuilder/.cursor/rules/security.mdc
Security hardening and vulnerability defense skill. Enforces OWASP Top 10 mitigations, zero hardcoded secrets, input sanitization, and SQL parameterization.
darknecrocitiesReads credentialsCursor ruledarknecrocities/SkillBuilder/.cursor/rules/world-class-engineering.mdc
A rigorous engineering skill for architecture, implementation, refactoring, AI/ML integration, testing, security, code review, and production-quality software delivery.
galyarderlabsCursor rulegalyarderlabs/galyarder-framework/.cursor/rules/code-reviewer.mdc
Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code. MUST BE USED for all code changes.
darknecrocitiesReads credentialsCursor ruledarknecrocities/SkillBuilder/.cursor/rules/gcp.mdc
Google Cloud Platform architecture, Cloud Run serverless deployment, Pub/Sub, Secret Manager, Cloud SQL, and IAM least-privilege security.
HermeticOrmusCursor ruleHermeticOrmus/linux-sysadmin-skills/.cursor/rules/linux-sysadmin.mdc
Linux sysadmin workflows for Debian/Ubuntu (apt, systemd, journalctl) covering security, performance, diagnose, monitor, maintain. Confirm before destructive operations.
encoreshaoCursor ruleencoreshao/encore-skills/.cursor/rules/review-code.mdc
Pre-MR self-review — first confirm the problem is actually solved, then check for security, correctness, and simplicity
rustic-aiCursor rulerustic-ai/codeprism/.cursor/rules/rust-advanced.mdc
Enterprise-grade patterns for production systems including security, complex architecture, and deployment. Use this for high-stakes applications requiring authentication, comprehensive testing, and production deployment.
michele-prandinaCursor rulemichele-prandina/ClaudE2E/.cursor/rules/agents/head-of-engineering.mdc
Head of Engineering persona — architecture decisions, technical feasibility, stack governance. Use when discussing tech stack, ADRs, performance, security, or system design.
galyarderlabsCursor rulegalyarderlabs/galyarder-framework/.cursor/rules/iso-42001-ai-governance.mdc
AI governance audit using ISO 42001 standard. Ensures AI systems are developed and deployed responsibly with risk management, ethics, security, transparency, and compliance best practices.
sordi-aiCursor rulesordi-ai/skill-everything/.cursor/rules/docker.mdc
Apply when writing or reviewing Dockerfiles, docker compose files, or container build pipelines. Covers layer caching, multi-stage builds, security hardening, and compose conventions.
Instruction files for Cursor's agent, kept in .cursor/rules/ as .mdc files.
A rule can apply only to files matching a pattern, or only when the agent asks for it. AGENTS.md always applies.
Copy the .mdc file into your project's .cursor/rules/ directory and adjust its globs.
Open a rule to see its discussion. Reports from people and their agents are coming.
