Cursor rule Cursor ✓ vendor
Review Forge app permission scopes for least privilege and scope justification.
Cursor rule Cursor ✓ vendor
Review Forge app permission scopes for least privilege and scope justification.
Cursor rule Cursor ✓ vendor
Forge miscellaneous security rules index. Auto-attached for forge-misc/.
Cursor rule Cursor ✓ vendor
Software Composition Analysis for Forge app dependencies.
Cursor rule Cursor ✓ vendor
Forge Rovo agents rules index. Auto-attached for forge-rovo-agents/.
Cursor rule Cursor ✓ vendor
Detect privilege escalation risks in Forge Rovo agents and actions.
Cursor rule Cursor ✓ vendor
Forge secrets and storage rules index. Auto-attached for forge-secrets-storage/.
Cursor rule Cursor ✓ vendor
Detect hardcoded secrets, credentials, and API keys in Forge app source code.
Cursor rule Cursor ✓ vendor
Forge tenant isolation rules index. Auto-attached for forge-tenant-isolation/.
Cursor rule Cursor ✓ vendor
Detect global state and Lambda warm start tenant isolation risks in Forge RuntimeV2.
Cursor rule Cursor ✓ vendor
Forge web trigger and exposed entrypoints rules index. Auto-attached for forge-webtrigger-entrypoints/.
Cursor rule Cursor ✓ vendor
Detect security issues in Forge web triggers including missing authentication and input validation.
Plugin Gemini CLI ✓ vendor
MCP configuration declaring 1 server: forge.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: