Rules, ignore files and safe agent settings in Cursor
Keep secrets away from coding agents, add security rules, and control what the agent is allowed to run.
Topic
Coding agents, rules files, ignore files and safe auto-run settings.
Keep secrets away from coding agents, add security rules, and control what the agent is allowed to run.
What outside scanners can and can't see, what you should never paste into one, and how to check their findings yourself.
If you only fix one thing before launch, make it this: which keys are safe in the browser, and how to make sure user A can never read user B's data.
Use the built-in Quick and Deep scans, keep API keys in Secrets, and review RLS before real users arrive.
The BuiltSafely weekly
Platform changes that affect the security of AI-built apps, checked against official docs. Free. Unsubscribe any time.