Security cursor rules

1,087 tagged Security, measured the same way as everything else here.

Browse within: Drupal 51cursorrules 51cursor-rules 39ai-governance 36best-practices 33claude-code-skills 30gemini-cli-extension 30compliance 26coding-best-practices 21javascript-coding-standards 21php-coding-standards 21ai-coding-assistant 16aiagents 16nextjs 15

node-express-security

291

coldtatooine/vuln-skill-pack

Cursor rule

Node.js & Express API security footguns — missing auth/authz middleware, IDOR, broken JWT verification, permissive CORS, SQL/NoSQL/command injection, missing rate limiting, mass assignment. Apply when reviewing, building, or shipping a Node/Express (or Fastify/Koa/Nest) backend.

2 7d ago A 0 tokens original MIT

stripe-security

292

coldtatooine/vuln-skill-pack

Cursor rule

Stripe security footguns — unverified webhook signatures, trusting price/amount from the client, secret key exposure, missing idempotency, fulfilling on the wrong event. Apply when reviewing, building, or shipping payment or billing flows with Stripe.

2 7d ago A 0 tokens original MIT

supabase-security

293

coldtatooine/vuln-skill-pack

Cursor rule

Supabase security footguns — Row Level Security disabled or too permissive, servicerole key exposed to the client, weak policies, public storage buckets, client-set privilege columns. Apply when the app uses Supabase (Postgres, Auth, Storage, Edge Functions).

2 7d ago A 0 tokens original MIT

cdk-conventions

294

TrevorEdris/fellowship-of-the-workflows

Cursor rule

AWS CDK construct authoring conventions: L1/L2/L3 construct selection, security defaults, stack and stage structure, cdk-nag security scanning, and assertions testing. Apply when cdk.json is present in the project.

2 2mo ago A 0 tokens

arbiterx

297

NeelPrime/arbiterx

Cursor rule Cursor

ArbiterX engineering discipline — enforces minimal, robust, unbreakable code.

2 1mo ago A 302 tokens original Apache-2.0

shell-file-safety

301

premouseking/Mentora

Cursor rule Cursor

A set of shell rules for handling files safely from the command line. It describes commands that should require confirmation or be blocked, commands that are allowed, and safer alternatives.

2 1mo ago A 771 tokens

linux-sysadmin

302

HermeticOrmus/linux-sysadmin-skills

Cursor rule Cursor

Linux sysadmin workflows for Debian/Ubuntu (apt, systemd, journalctl) covering security, performance, diagnose, monitor, maintain. Confirm before destructive operations.

2 3mo ago A 33 tokens original MIT

didclaw-security

303

didclawapp-ai/didclaw

Cursor rule Cursor

A set of security and TypeScript rules for Tauri applications. Tauri is a framework for building desktop apps with web technologies and Rust.

2 4mo ago A 0 tokens AGPL-3.0

cursor-rule

305

AllenMuu/mysql-cli

Cursor rule

Guard mysql-cli write/ddl/destructive operations; request human approval before running them.

2 21d ago A 172 tokens original MIT

tg-mcp-guarded

307

matskevich/tg-mcp-guarded

Cursor rule

dual-plane telegram mcp: read-only analytics + guarded actions with anti-spam and block-risk controls.

2 2mo ago A 0 tokens copy · 100% MIT

dirctl-auth

308

agntcy/dir-mcp

Cursor rule

Guide for authenticating with the AGNTCY Directory instance via dirctl — using the bundled binary or DIRECTORYDIRCTLPATH, never PATH scanning.

2 2d ago A 28 tokens original Apache-2.0

mcpkernel-security

310

piyushptiwari1/mcpkernel

Cursor rule

MCPKernel security rules for AI agent tool calls. Use when working with MCP tool servers, AI agents, or any code that makes autonomous tool calls.

2 +1 2mo ago A 0 tokens original Apache-2.0

cursorrules

311

CSOAI-ORG/dora-compliance-mcp

Cursor rule Cursor

When the user asks about DORA (Digital Operational Resilience Act), ICT risk management, financial sector cybersecurity, third-party ICT risk, or Regulation (EU) 2022/2554, use the dora-compliance-mcp tools.

1 2mo ago A 203 tokens original MIT

cursorrules

312

CSOAI-ORG/sbom-cyclonedx-mcp

Cursor rule Cursor

When the user asks about SBOM, CycloneDX, SPDX, supply chain, EO 14028, VEX, use sbom-cyclonedx-mcp tools.

1 2mo ago A 201 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: