Security cursor rules

ckrl/ha-gitops

Cursor rule Cursor

Security-critical rules — secrets.yaml, SSH keys, knownhosts, sanitized logging.

antonellof/s0-cli

Cursor rule Cursor

Use s0-cli (local hybrid SAST + LLM agent) for security audits, vulnerability scans, PR security reviews, and "vibe-code" detection. Triggered when the user asks about security, CVEs, OWASP, secrets, SQL injection, XSS, SSRF, weak crypto, or whether AI-generated code is safe to ship.

Parth308/auditx

Cursor rule Cursor

This repo uses auditx for security/quality scans. Before committing or opening a PR, or when you are asked to review code quality/security.

justin-0101/AutoCorrection-V3.0-0407

Cursor rule Cursor

A set of coding instructions describing a software system’s architecture, dependency-injection setup, folder structure, main modules, and data flow.

context-dot-dev/cursor-plugin

Cursor rule

Apply secure authentication and side-effect handling when writing Context.dev integrations.

proSamik/starterkit-nextjs-polar-betterauth-postgres

Cursor rule Cursor

This project uses Better Auth with email OTP verification for secure user authentication. The system includes password reset, email verification during signup, and event tracking via Plunk.

Mikaru0Mystic/breachproof

Cursor rule

Breachproof - autonomous AI security audit + auto-fix until zero findings remain.

joaovicdev/nemesis

Cursor rule Cursor

Security rules for NEMESIS — data handling, scope validation, and ethical guardrails.

Genocs/genocs-library

Cursor rule Cursor

This rule provides comprehensive best practices for developing dotnet applications, covering code organization, security, performance, testing, and common pitfalls. It aims to improve code quality, security posture, and overall efficiency when working with the .NET Core framework.

proSamik/starterkit-nextjs-aisdk-betterauth-polar

Cursor rule Cursor

Polar SaaS Kit is a production-ready Next.js starter for building modern SaaS applications with payments, authentication, and premium features. Built with Next.js 15, Better Auth, Polar.sh payments, and PostgreSQL with a comprehensive theming system.

packtman/AI-Tools-Secure-Configs

Cursor rule

Security rules for all Cursor Agent interactions.

Tholem-AI/Tholem-Cursor-Kit

Cursor rule Cursor

Unified runtime safety constraints for environment, git, and structure.

HaoweiChan/tinboker

Cursor rule Cursor

Auth (Google OAuth, JWT, dev bypass), user profile/watchlist/settings, admin dashboard, dev portal. Auto-attached when editing auth or admin code.

ArabAgentSkills/arab-payments-skill-atlas

Cursor rule Cursor

Use when building or reviewing Egypt payment flows with Paymob, FawryPay, Geidea, EasyKash, Kashier, PaySky, valU, Souhoola, callbacks, webhooks, HMAC, SecureHash, redirects, refunds, payment inquiry, or payment secrets.

bmdhodl/agent47

Cursor rule Cursor

AgentGuard local-first safety.

I4cTime/q-ring

Cursor rule

Warn about .env files and suggest importing into q-ring for secure management.

I4cTime/q-ring

Cursor rule

Use q-ring MCP tools for all secret operations — never access the OS keychain directly.

I4cTime/q-ring

Cursor rule

Enforce secret hygiene — never hardcode credentials in source code, always use q-ring.

CSOAI-ORG/iso-27001-ai-mcp

Cursor rule Cursor

When the user asks about iso 27001, use iso-27001-ai-mcp tools: auditisms, riskassessment, gapanalysis, crosswalktoai, generatesoa.

MuhammedZohaib/patchman

Cursor rule Cursor

Patchman defensive security review defaults.

Connected-Mate/corporate-launcher

Cursor rule Cursor

Generates a secure, branded, organization-specific launcher that wraps Claude Code, Codex CLI, Gemini CLI, Cursor, or Cline onto a corporate AI gateway. Trigger phrases — wrap claude code, wrap codex, wrap gemini, wrap cursor, wrap cline, white label, internal AI CLI, bedrock gateway, azure openai cli, vertex cli…

Kanis04/cursor-unchained

Cursor rule Cursor

Snyk Security At Inception.

mrharishkumar/fastapi-cursor-boilerplate

Cursor rule Cursor

Testing and Security Guidelines for FastAPI Applications Including Unit Testing, Environment Variable Management, and Authentication Security.

Arnabdaz/PR_Buddy

Cursor rule

You are PR REVIEW ASSISTANT - an AI agent specialized in reviewing pull requests. You have expertise in.