Security cursor rules

Checkmarx/cx-agentic-ai

Cursor rule

Scan and remediate SAST vulnerabilities in source code files using Checkmarx ASCA and the Checkmarx MCP codeRemediation tool.

Checkmarx/cx-agentic-ai

Cursor rule

Scan and remediate IaC (Infrastructure-as-Code) misconfigurations in Dockerfile, Terraform, Kubernetes YAML, and other IaC files using Checkmarx KICS and the Checkmarx MCP imageRemediation tool.

Checkmarx/cx-agentic-ai

Cursor rule

Scan and remediate vulnerable or malicious open-source packages in dependency manifests and lockfiles using Checkmarx SCA and the Checkmarx MCP packageRemediation tool.

CSOAI-ORG/agent-audit-logger-mcp

Cursor rule Cursor

When the user asks about agent-to-agent audit trails, immutable A2A logging, DORA/NIS2/EU AI Act audit requirements, or attestation-signed bundle export, use agent-audit-logger-mcp tools.

CSOAI-ORG/agent-policy-enforcement-mcp

Cursor rule Cursor

When the user asks about agent IAM, per-agent-pair policies, agent authorization rules, multi-tenant agent governance, or "agent A may only talk to agent B if X", use agent-policy-enforcement-mcp tools.

CSOAI-ORG/ai-bom-mcp

Cursor rule Cursor

When the user asks about AI Bill of Materials, AI-BOM, supply chain transparency, model dependencies, training data provenance, or model card generation, use ai-bom-mcp tools.

CSOAI-ORG/ai-incident-reporting-mcp

Cursor rule Cursor

When the user asks about AI incident reporting, serious incident classification, EU AI Act Article 73, OECD AI Incident Monitor (AIM), or multi-regime incident routing, use ai-incident-reporting-mcp tools.

CSOAI-ORG/cisa-kev-mcp

Cursor rule Cursor

When the user asks about CISA KEV, known exploited vulnerabilities, BOD 22-01, EPSS, CVE, use cisa-kev-mcp tools.

CSOAI-ORG/code-reviewer-ai-mcp

Cursor rule Cursor

When the user asks about code reviewer, use code-reviewer-ai-mcp tools: reviewcode, checkstyle, findbugs, suggestimprovements, securityscan.

CSOAI-ORG/cra-compliance-mcp

Cursor rule Cursor

When the user asks about Cyber Resilience Act, Regulation (EU) 2024/2847, products with digital elements, CE marking for software, or vulnerability disclosure, use cra-compliance-mcp tools.

CSOAI-ORG/cybersecurity-ai-mcp

Cursor rule Cursor

When the user asks about cybersecurity, use cybersecurity-ai-mcp tools: classifyvulnerability, lookupcve, checksecurityheaders, analyzepasswordstrength, generatethreatmodel.

CSOAI-ORG/dataprivacy-ai-mcp

Cursor rule Cursor

When the user asks about dataprivacy, use dataprivacy-ai-mcp tools: classifypersonaldata, assesslawfulbasis, generatedpia, checkdatatransfer, calculatebreachseverity.

CSOAI-ORG/deepfake-detector-mcp

Cursor rule Cursor

When the user asks about deepfake detector, use deepfake-detector-mcp tools: detectdeepfake, analyzeaudioauthenticity, checkimageprovenance, generateauthenticityreport.

CSOAI-ORG/dora-nis2-crosswalk-mcp

Cursor rule Cursor

When the user is in scope for BOTH DORA and NIS2 (banks, insurers, payment institutions, CTPPs) and asks about dual compliance, overlapping obligations, or unified evidence collection, use dora-nis2-crosswalk-mcp tools.

CSOAI-ORG/healthcare-ai-governance-mcp

Cursor rule Cursor

When the user asks about healthcare ai governance, use healthcare-ai-governance-mcp tools: classifysamd, checkcdsexemption, hipaaaicheck, whohealthaiethics, dualcompliancecheck.

CSOAI-ORG/jwt-ai-mcp

Cursor rule Cursor

When the user asks about jwt, use jwt-ai-mcp tools: decodejwt, validatejwt, generatejwt, inspectclaims, verifyexpiration.

CSOAI-ORG/mitre-atlas-mcp

Cursor rule Cursor

When the user asks about MITRE ATLAS, adversarial AI, ML security, OWASP LLM, use mitre-atlas-mcp tools.

CSOAI-ORG/csoai-watermark-attest-mcp

Cursor rule Cursor

When the user asks about meok watermark attest, use meok-watermark-attest-mcp tools: getdeadlinestatus, classifyobligations, generatedisclosuretext, auditcontentpipeline, signwatermarkattestation.

CSOAI-ORG/nis2-compliance-mcp

Cursor rule Cursor

When the user asks about NIS2, Directive (EU) 2022/2555, network information security, essential/important entities, or cybersecurity directive compliance, use the nis2-compliance-mcp tools.

CSOAI-ORG/nist-rmf-ai-mcp

Cursor rule Cursor

When the user asks about nist rmf, use nist-rmf-ai-mcp tools: assessriskprofile, mapaiimpact, generateriskcontrols, crosswalktoeuaiact, createriskreport.

CSOAI-ORG/otp-ai-mcp

Cursor rule Cursor

When the user asks about otp, use otp-ai-mcp tools: generateotp, verifyotp, generatesecret, getqruri.

CSOAI-ORG/password-ai-mcp

Cursor rule Cursor

When the user asks about password, use password-ai-mcp tools: generatepassword, checkstrength, hashpassword, estimatecracktime.

CSOAI-ORG/pci-dss-mcp

Cursor rule Cursor

When the user asks about pci dss, use pci-dss-mcp tools: assesspcicompliance, checkcardholderdata, networksegmentationcheck, vulnerabilityscancheck, generatesaq.

CSOAI-ORG/scam-detector-mcp

Cursor rule Cursor

When the user asks about scam detector, use scam-detector-mcp tools: quickcheck, analyzeurl, detectsocialengineering, verifysender, reportscam.