admin-rbac
01Cursor rule
Requires explicit role assertion before executing admin-scoped operations. Prevents privilege escalation and BFLA vulnerabilities.
API security skills and rules for Cursor, Claude Code, Copilot, and all major AI coding agents. OWASP API Top 10 coverage — zero configuration.
Cursor rule
Requires explicit role assertion before executing admin-scoped operations. Prevents privilege escalation and BFLA vulnerabilities.
Cursor rule
Enforces authentication middleware on all API route handlers. Applies to Express, FastAPI, Django, Spring, Go Gin.
Cursor rule
Prevents leaking internal error details, stack traces, or database error messages in API responses.
Cursor rule
Requires validation of all user-supplied input before use. Prevents injection, unexpected types, and missing required fields.
Cursor rule
Requires ownership validation on any endpoint that accesses database records by user-supplied ID. Prevents BOLA/IDOR vulnerabilities.