This repository contains Cursor Security Rules designed to improve the security of both development workflows and AI agent usage within the Cursor environment. These rules aim to enforce safe coding practices, control sensitive operations, and reduce risk in AI-assisted development.
matank001/cursor-security-rules
Cursor rule Cursor needs its repo
Path traversal attacks occur when user-controlled input is used to construct file paths, allowing attackers to access files outside the intended directory. This can lead to unauthorized file access, data leakage, or system compromise.
matank001/cursor-security-rules
Cursor rule Cursor needs its repo
These rules apply to all C#/.NET code in the repository and aim to prevent common security risks through disciplined use of input validation and deserialization, output encoding, and safe APIs.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all C source and header files in the repository and aim to prevent memory corruption, code injection, and unsafe system behavior.
matank001/cursor-security-rules
Cursor rule Cursor needs its repo
This rule contains important information about secure coding.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all Java code in the repository (including Spring, Jakarta EE, and standalone apps) and aim to prevent common security risks through disciplined use of input validation, safe APIs, and secure coding patterns.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all Node.js code in the repository and aim to prevent common security risks through disciplined use of input validation, output encoding, and safe APIs.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all PHP code in the repository and aim to prevent common security vulnerabilities through strict handling of input, output, and execution.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all Python code in the repository and aim to prevent common security risks through disciplined use of input validation, output encoding, and safe APIs.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all Ruby code in the repository (including Rails apps, scripts, and gems) and aim to prevent common security vulnerabilities through safe coding patterns, input validation, and proper use of the Ruby standard library.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all Rust code in the repository and aim to prevent common security risks through disciplined use of memory safety, input validation, error handling, and safe APIs.
matank001/cursor-security-rules
Cursor rule Cursor
These rules define essential practices for writing and generating secure code. They apply universally — to manual development, automated tooling, and AI-generated code.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all code and systems integrating with MCP (Model Context Protocol), including generated actions, scripts, and agentic behavior.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all code that interacts with SQL databases, regardless of language or framework, including generated code.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all code that performs outbound network requests, regardless of language or framework, including generated code.
matank001/cursor-security-rules
Cursor rule Cursor
These rules apply to all code that parses or processes XML, regardless of language or framework, including AI-generated code.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: