Agent Skills
› grasmash/drupal-claude-skills
› ivangrynenko-cursorrules-drupal
ivangrynenko-cursorrules-drupal
GitHub提供Drupal开发的安全编码规范，覆盖OWASP Top 10如认证、注入、XSS及访问控制等。用于编写或审查代码时的安全防护、输入处理、权限检查及安全审计。
触发场景
编写Drupal安全相关代码
审查Drupal代码安全性
处理用户输入与查询构建
执行安全审计
安装
npx skills add grasmash/drupal-claude-skills --skill ivangrynenko-cursorrules-drupal -g -y
SKILL.md
Frontmatter
{
"name": "ivangrynenko-cursorrules-drupal",
"description": "Drupal security and coding rules from Ivan Grynenko's cursorrules, organised by OWASP Top 10 (2021) category: authentication, access control, injection (SQL, XSS), cryptographic failures, security misconfiguration, vulnerable dependencies, SSRF, insecure design, integrity, and logging, plus database standards and file permissions. Use when writing or reviewing Drupal code for security, handling user input, building queries, handling file uploads, adding permission or access checks, making outbound HTTP requests, or preparing a security review."
}
Ivan Grynenko - Drupal Cursor Rules
Source: Ivan Grynenko - Cursor Rules Author: Ivan Grynenko License: MIT
When This Skill Activates
Activates when working with Drupal security topics including:
- Authentication and session management
- Access control and permissions
- SQL injection and XSS prevention
- Cryptography and data protection
- Security configuration
- Dependency management
- SSRF prevention
- Secure design patterns
- Software integrity
- Security logging and monitoring
Available Topics
All topics are available as references in the /references/ directory.
Each reference contains:
- OWASP classification and reference
- Security patterns and anti-patterns
- Enforcement checks
- Code examples
- Best practices
OWASP Top 10 Coverage
- @references/authentication-security.md - Authentication failures (A07:2021)
- @references/access-control-security.md - Broken access control (A01:2021)
- @references/injection-prevention.md - Injection vulnerabilities (A03:2021)
- @references/data-security.md - Cryptographic failures (A02:2021)
- @references/security-configuration.md - Security misconfiguration (A05:2021)
- @references/dependency-security.md - Vulnerable components (A06:2021)
- @references/ssrf-prevention.md - Server-side request forgery (A10:2021)
- @references/secure-design.md - Insecure design (A04:2021)
- @references/integrity-validation.md - Software integrity failures (A08:2021)
- @references/logging-security.md - Logging and monitoring failures (A09:2021)
Additional Security Topics
- @references/database-standards.md - Database best practices
- @references/file-permissions.md - File security and access control
See /references/ directory for complete list.
To update: Run .claude/scripts/sync-ivan-rules.sh
版本历史
-
19514f4
当前 2026-10-19 07:29
清理描述与引用路径；修复失效链接和同步脚本路径；移除无内容的占位符引用并链接至在线章节；更新SKILL.md模板以保留新的描述格式。
- eb9b3d3 2026-07-25 05:35
