# IDE rules for Security

Rules for Security: what each one does, an install command and example prompts.

25 cards

- HTML: https://affpapa.org/en/nevibecode/rules/topic/security
- Instructions for agents: https://affpapa.org/en/nevibecode/agents.md

- [mongo-dba](https://affpapa.org/en/nevibecode/rules/mongo-dba.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Configures GitHub Copilot for MongoDB DBA tasks: manages replica sets, tunes indexes, handles backups, and enforces security practices for MongoDB 7.x+.
- [kubernetes-manifests](https://affpapa.org/en/nevibecode/rules/kubernetes-manifests.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Configures GitHub Copilot to generate production-ready Kubernetes manifests.
- [gilfoyle-code-review](https://affpapa.org/en/nevibecode/rules/gilfoyle-code-review.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Turns GitHub Copilot into the sardonic systems architect from Silicon Valley.
- [fedora-linux](https://affpapa.org/en/nevibecode/rules/fedora-linux.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Sets Fedora administration standards for GitHub Copilot, focusing on dnf workflows, systemd drop-ins, and strict SELinux enforcement.
- [debian-linux](https://affpapa.org/en/nevibecode/rules/debian-linux.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — This rule guides Copilot when it writes Debian administration advice, scripts, or docs.
- [dataverse-python-authentication-security](https://affpapa.org/en/nevibecode/rules/dataverse-python-authentication-security.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Security instructions for the Python Dataverse SDK in GitHub Copilot.
- [csharp-razorpages](https://affpapa.org/en/nevibecode/rules/csharp-razorpages.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Configures GitHub Copilot to write idiomatic Razor Pages across .cshtml and .cshtml.cs files.
- [containerization-docker-best-practices](https://affpapa.org/en/nevibecode/rules/containerization-docker-best-practices.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Guides Docker image creation with rules for multi-stage builds, process isolation, environment portability, and minimal runtime footprints.
- [coldfusion-cfm](https://affpapa.org/en/nevibecode/rules/coldfusion-cfm.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — This rule sets ColdFusion conventions for *.cfm files, including query safety, application structure, and HTMX output handling.
- [centos-linux](https://affpapa.org/en/nevibecode/rules/centos-linux.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — This rule guides CentOS administration, package work, systemd, firewalld, and SELinux.
- [azure-iot-edge-architecture](https://affpapa.org/en/nevibecode/rules/azure-iot-edge-architecture.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Requires reviewing Azure IoT Edge documentation before proposing architectures.
- [azure-devops-pipelines](https://affpapa.org/en/nevibecode/rules/azure-devops-pipelines.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — This rule guides Azure DevOps Pipeline YAML structure, testing, security, and deployment.
- [attester-verify-packages](https://affpapa.org/en/nevibecode/rules/attester-verify-packages.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Checks PyPI and npm package and symbol names through attester.dev before installation or import.
- [ansible](https://affpapa.org/en/nevibecode/rules/ansible.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — Sets standards for Ansible playbooks: task naming rules, FQCN module paths, Ansible Vault secret separation, and validation via ansible-lint.
- [ai-prompt-engineering-safety-best-practices](https://affpapa.org/en/nevibecode/rules/ai-prompt-engineering-safety-best-practices.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — This rule guides prompt writing with clear context, constraints, and output formats.
- [agent-safety](https://affpapa.org/en/nevibecode/rules/agent-safety.md) — rule (official GitHub) · github · GitHub Copilot · ★ 40418 — This rule sets access controls, policy checks, and audit guidance for code built with AI agents.
- [solidity-hardhat-cursorrules-prompt-file](https://affpapa.org/en/nevibecode/rules/solidity-hardhat-cursorrules-prompt-file.md) — rule · PatrickJS · Cursor · ★ 41011 — A Cursor rule that turns the AI assistant into a Solidity and smart contract security expert, with Hardhat-based testing and gas work.
- [nextjs15-supabase-cursorrules-prompt-file](https://affpapa.org/en/nevibecode/rules/nextjs15-supabase-cursorrules-prompt-file.md) — rule · PatrickJS · Cursor · ★ 41011 — A Cursor rule that keeps the agent inside a Next.js 15, Supabase and TypeScript strict stack — from session checks to RLS and Stripe keys.
- [database](https://affpapa.org/en/nevibecode/rules/database.md) — rule · PatrickJS · Cursor · ★ 41011 — A Cursor rule with database practices for Prisma and Supabase: schemas, migrations, queries, RLS policies.
- [solidity](https://affpapa.org/en/nevibecode/rules/solidity.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that sets style and safety requirements for Solidity code: pinned pragma, custom errors, reentrancy protection.
- [nginx](https://affpapa.org/en/nevibecode/rules/nginx.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that sets how NGINX configs get written: modular includes, modern TLS, caching and rate limits.
- [kubernetes](https://affpapa.org/en/nevibecode/rules/kubernetes.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that sets how you write and split Kubernetes manifests: labels, resources, probes, Pod Security Standards.
- [github-actions](https://affpapa.org/en/nevibecode/rules/github-actions.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that enforces strict GitHub Actions workflow habits: reusable builds, dependency caching, least-privilege tokens.
- [electron](https://affpapa.org/en/nevibecode/rules/electron.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that pins down how your team writes Electron code: context isolation, safe contextBridge APIs, request-response IPC and cross-platform paths.
- [clerk](https://affpapa.org/en/nevibecode/rules/clerk.md) — rule · sanjeed5 · Cursor · ★ 3579 — A Cursor rule that pins down how Clerk auth should be wired: PKCE, server-side checks, short-lived tokens.

## Refine
[yaml](https://affpapa.org/en/nevibecode/tag/yaml.md) · [ci-cd](https://affpapa.org/en/nevibecode/tag/ci-cd.md) · [database](https://affpapa.org/en/nevibecode/tag/database.md) · [linux](https://affpapa.org/en/nevibecode/tag/linux.md) · [smart-contracts](https://affpapa.org/en/nevibecode/tag/smart-contracts.md) · [solidity](https://affpapa.org/en/nevibecode/tag/solidity.md) · [ai-agents](https://affpapa.org/en/nevibecode/tag/ai-agents.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [caching](https://affpapa.org/en/nevibecode/tag/caching.md) · [containers](https://affpapa.org/en/nevibecode/tag/containers.md) · [csharp](https://affpapa.org/en/nevibecode/tag/csharp.md) · [dependencies](https://affpapa.org/en/nevibecode/tag/dependencies.md)

## Narrow this list
Parameters: `?platform=<claude-code|codex|cursor|copilot|gemini-cli|windsurf|…>`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md
