Agent Skills
› grasmash/drupal-claude-skills
› ivangrynenko-cursorrules-drupal
ivangrynenko-cursorrules-drupal
GitHub提供Drupal开发的安全编码规范，涵盖OWASP Top 10及数据库、文件权限等。用于编写或审查Drupal代码时的安全防护、输入处理、查询构建、权限控制及HTTP请求安全。
Trigger Scenarios
编写Drupal代码时涉及安全逻辑
审查Drupal代码的安全性
处理用户输入或构建SQL查询
进行安全审计或渗透测试准备
Install
npx skills add grasmash/drupal-claude-skills --skill ivangrynenko-cursorrules-drupal -g -y
SKILL.md
Frontmatter
{
"name": "ivangrynenko-cursorrules-drupal",
"description": "Drupal security and coding rules from Ivan Grynenko's cursorrules, organised by OWASP Top 10 (2021) category: authentication, access control, injection (SQL, XSS), cryptographic failures, security misconfiguration, vulnerable dependencies, SSRF, insecure design, integrity, and logging, plus database standards and file permissions. Use when writing or reviewing Drupal code for security, handling user input, building queries, handling file uploads, adding permission or access checks, making outbound HTTP requests, or preparing a security review."
}
Ivan Grynenko - Drupal Cursor Rules
Source: Ivan Grynenko - Cursor Rules Author: Ivan Grynenko License: MIT
When This Skill Activates
Activates when working with Drupal security topics including:
- Authentication and session management
- Access control and permissions
- SQL injection and XSS prevention
- Cryptography and data protection
- Security configuration
- Dependency management
- SSRF prevention
- Secure design patterns
- Software integrity
- Security logging and monitoring
Available Topics
All topics are available as references in the /references/ directory.
Each reference contains:
- OWASP classification and reference
- Security patterns and anti-patterns
- Enforcement checks
- Code examples
- Best practices
OWASP Top 10 Coverage
- @references/authentication-security.md - Authentication failures (A07:2021)
- @references/access-control-security.md - Broken access control (A01:2021)
- @references/injection-prevention.md - Injection vulnerabilities (A03:2021)
- @references/data-security.md - Cryptographic failures (A02:2021)
- @references/security-configuration.md - Security misconfiguration (A05:2021)
- @references/dependency-security.md - Vulnerable components (A06:2021)
- @references/ssrf-prevention.md - Server-side request forgery (A10:2021)
- @references/secure-design.md - Insecure design (A04:2021)
- @references/integrity-validation.md - Software integrity failures (A08:2021)
- @references/logging-security.md - Logging and monitoring failures (A09:2021)
Additional Security Topics
- @references/database-standards.md - Database best practices
- @references/file-permissions.md - File security and access control
See /references/ directory for complete list.
To update: Run .claude/scripts/sync-ivan-rules.sh
Version History
-
19514f4
Current 2026-10-19 07:29
清理描述与引用路径；修复失效链接和同步脚本路径；移除无内容的占位符引用并链接至在线章节；更新SKILL.md模板以保留新的描述格式。
- eb9b3d3 2026-07-25 05:35
