wiz-sec-public/secure-rules-files
Cursor rule Cursor
Enforces security best practices for .NET applications built with ASP.NET Core, focusing on preventing top CWEs.
wiz-sec-public/secure-rules-files
Cursor rule Cursor
Enforces security best practices for .NET applications built with ASP.NET Core, focusing on preventing top CWEs.
wiz-sec-public/secure-rules-files
Cursor rule Cursor
Enforces security best practices for C applications to prevent common vulnerabilities during code generation.
wiz-sec-public/secure-rules-files
Cursor rule Cursor
Enforce secure infrastructure-as-code best practices for HCL/Terraform configurations to prevent common cloud security misconfigurations.
wiz-sec-public/secure-rules-files
Cursor rule Cursor
Enforces security best practices for Java applications built with Spring by addressing common vulnerabilities.
wiz-sec-public/secure-rules-files
Cursor rule Cursor
Enforces security best practices for JavaScript and Node.js applications.
wiz-sec-public/secure-rules-files
Cursor rule Cursor
Generates secure JavaScript code for React applications, focusing on preventing common vulnerabilities like XSS, CSRF, and hardcoded secrets, adhering to OWASP ASVS guidelines.
wiz-sec-public/secure-rules-files
Cursor rule Cursor
Generates secure Python/Django code inherently preventing top security weaknesses, adhering to OWASP ASVS and avoiding common CWEs.
wiz-sec-public/secure-rules-files
Cursor rule Cursor
This rule enforces security best practices for Python applications built with Flask, focusing on preventing common web vulnerabilities.
wiz-sec-public/secure-rules-files
Cursor rule Cursor
Enforces security best practices for YAML infrastructure configurations using Cloudformation.
Skill Claude Code
Generate SITF-compliant attack flow JSON files from attack descriptions or incident reports. Use when analyzing supply chain attacks, breaches, or security incidents.
Skill Claude Code
Generate SITF-compliant attack flow JSON from red team or pentest reports. Accepts report files, URLs, or pasted findings. Use when documenting offensive security engagements.
Skill Claude Code
Generate a PR-ready technique proposal when an attack step doesn't map to existing SITF techniques. Use after /attack-flow identifies technique gaps.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: