ivangrynenko-cursorrules-drupal

Audit Drupal code for security vulnerabilities using OWASP Top 10 patterns.

73|4|Updated Nov 5, 2025

Search Tags:#code review #security #authentication #vulnerability #owasp #access control #drupal

Ready to run

npx skills add https://github.com/grasmash/drupal-claude-skills --skill ivangrynenko-cursorrules-drupal

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ivangrynenko-cursorrules-drupal
Source: https://github.com/grasmash/drupal-claude-skills/tree/main/.claude/skills/ivangrynenko-cursorrules-drupal
Command: npx skills add https://github.com/grasmash/drupal-claude-skills --skill ivangrynenko-cursorrules-drupal

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Drupal security vulnerabilities can lead to data breaches and system compromise. This skill provides comprehensive, battle-tested security patterns based on OWASP Top 10, helping you identify and prevent common security flaws in your Drupal applications.

Core Features & Use Cases

OWASP Top 10 Guidance: Covers critical areas like authentication failures, broken access control, injection prevention, and cryptographic failures.
Secure Coding Patterns: Offers best practices and anti-patterns for secure Drupal development, including code examples.
Security Configuration: Guides on proper security settings for file permissions, database standards, and general misconfiguration.
Use Case: During a code review, you suspect a potential SQL injection vulnerability. This skill provides immediate guidance on parameterized queries and secure database API usage, helping you fix the issue before it reaches production.

Quick Start

Using the ivangrynenko-cursorrules-drupal skill, explain how to prevent SQL injection in Drupal, including code examples for parameterized queries.

Frequently Asked Questions about ivangrynenko-cursorrules-drupal

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify SQL injection vulnerabilities in Drupal code during security audits?▼

SQL injection vulnerabilities in Drupal occur when user input reaches database queries without parameterization. Use parameterized queries with Drupal's database API, prepared statements, and placeholders to prevent injection attacks. This skill audits your code against OWASP Top 10 patterns to catch these flaws before production.

What authentication and access control vulnerabilities should I check for in Drupal modules?▼

Authentication failures and broken access control are OWASP Top 10 risks in Drupal. Check for weak password policies, missing permission checks, insecure token handling, and improper role enforcement. This skill provides patterns to audit authentication mechanisms, access control logic, and cryptographic implementations across core, contributed, and custom modules.

Can I use this security guidance for code review workflows in Drupal CI pipelines?▼

Yes. This skill integrates with code review and CI checks using Cursor Rules to enforce OWASP security patterns automatically. It supports continuous security hardening workflows, scanning Drupal core, contributed modules, and custom extensions for vulnerabilities before deployment.

How do I prevent SSRF and injection attacks in my Drupal custom extensions?▼

Server-side request forgery and injection attacks require input validation, allowlisting, and secure API usage. This skill covers injection prevention, SSRF mitigation, cryptographic failures, and secure design patterns. It provides actionable guidance on secure database APIs, configuration hardening, and dependency management.

What are the key security configuration issues to address in Drupal deployments?▼

Security misconfiguration includes weak file permissions, insecure database settings, and unprotected credentials. This skill audits configuration security, logging, and software integrity across your Drupal stack, offering best practices for hardening settings and preventing common deployment flaws.

Does this approach work for securing both Drupal core and contributed modules?▼

Yes. This skill applies OWASP Top 10 security patterns to Drupal core, contributed modules, and custom extensions equally. It covers authentication, access control, injection prevention, cryptography, configuration, and dependency security across your entire Drupal codebase.