Security Cursor rules

1,327 tagged Security, measured the same way as everything else here.

Browse within: cursor 188cursorrules 89claude-code-plugin 67Drupal 65cursor-rules 60agents 53model-context-protocol 48cli 45mcp-server 43ai-governance 36coding-best-practices 35drupal-coding-standards 35javascript-coding-standards 35best-practices 34

ipc

01

dyad-sh/dyad

Cursor rule Cursor

You're building an Electron app following good security practices.

not rated 22k +137 yesterday A 1,412 tokens

varlock

03

dmno-dev/varlock

Cursor rule Cursor

Rules for working with varlock env-spec files, providing syntax highlighting, autocompletion, and validation for environment variable specifications.

not rated 4.7k +21 changed 1mo ago A 0 tokens original MIT

security-critical

04

memodb-io/Acontext

Cursor rule Cursor

The three most important security patterns in Payload CMS.

not rated 3.7k +1 3mo ago A 9 tokens original Apache-2.0

overview

05

deltazefiro/Amarok-Hider

Cursor rule Cursor

Amarok is a lightweight Android app that quickly hides files and applications — ideal for casual privacy needs. Instead of encryption, it manages file and app visibility using various techniques.

not rated 3.3k +8 2mo ago A 976 tokens original Apache-2.0

akto-core-rules

07

akto-api-security/akto

Cursor rule Cursor

Akto is the fastest growing AI Security platform for your teams to secure AI agents, MCPs, LLMs, Agent skills, Gen AI apps in your organization.

not rated 1.5k +1 changed 1mo ago A 129 tokens original MIT

vet-packages

08

safedep/vet

Cursor rule Cursor

Always use vet-mcp to vet any open source library package suggested by AI generated code before installation. Follow the rules below to use vet-mcp.

not rated 1.1k +4 2d ago A 74 tokens original Apache-2.0

H-mmer/pentest-agents

Cursor rule Cursor

This file is the "do not repeat" register. Every rule below came from a real session where an agent wasted time, got corrected by the user, inflated a report, or missed a bug. These lessons are target-agnostic — they apply to any program.

not rated 1.0k +17 4mo ago A 7 tokens

hipaa-audit

10

briiirussell/cybersecurity-skills

Cursor rule Cursor

Audit applications and infrastructure handling Protected Health Information against HIPAA — Security Rule (administrative, physical, technical safeguards), Privacy Rule, Breach Notification Rule, plus HITECH. Covers ePHI scoping, the 18 HIPAA identifiers, Business Associate Agreement (BAA) chain-of-liability…

not rated 422 +9 4mo ago A 167 tokens original MIT

matank001/cursor-security-rules

Cursor rule Cursor needs its repo

Path traversal attacks occur when user-controlled input is used to construct file paths, allowing attackers to access files outside the intended directory. This can lead to unauthorized file access, data leakage, or system compromise.

not rated 381 +1 1y ago A 2,694 tokens original MIT

MCP-Defender/MCP-Defender

Cursor rule Cursor

MCP Defender is a security application designed to monitor and protect Model Context Protocol (MCP) communications. It intercepts tool calls and responses, verifying them against security signatures to prevent potentially harmful operations. The following is a breakdown of the key components and files.

not rated 255 +1 4mo ago A 993 tokens AGPL-3.0

HCL_Terraform_rules

15

wiz-sec-public/secure-rules-files

Cursor rule Cursor

Enforce secure infrastructure-as-code best practices for HCL/Terraform configurations to prevent common cloud security misconfigurations.

not rated 243 +1 9mo ago A 1,211 tokens

repo-forensics

16

alexgreensh/repo-forensics

Cursor rule Cursor

Vet untrusted repos, skills, MCP servers, and packages with repo-forensics before installing them.

not rated 194 +4 changed 23d ago A 20 tokens

threat-infographic

18

davidmatousek/tachi

Cursor rule Cursor needs its repo

Threat infographic generator — transforms structured threat model output into visual infographic specifications and images via Gemini API. Supports multiple templates: Baseball Card (risk summary dashboard) and System Architecture (annotated architecture diagram with attack surface badges).

not rated 95 +1 3d ago A 43 tokens original Apache-2.0

ipc

20

SFARPak/AliFullStack

Cursor rule Cursor

You're building an Electron app following good security practices.

not rated 83 1mo ago A 1,342 tokens original Apache-2.0

security

21

Netxeo/skill-file-security

Cursor rule Cursor

Security Skill — Enterprise-grade security engineering.

not rated 75 +1 3mo ago A 238 tokens

project-always

22

sunnykgupta/AI-Helpers

Cursor rule Cursor

Core project conventions — code style, error handling, testing, security, git.

not rated 71 2mo ago A 1,703 tokens original MIT

huawei-agent-rules

24

huaweicloud/huaweicloud-devkit

Cursor rule Cursor

Cursor rule "huawei-agent-rules" from huaweicloud/huaweicloud-devkit, covering huaweicloud devkit — agent rules, core principles, secret safety, iam security and network security.

not rated 66 +1 changed 3d ago A 921 tokens original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: