ivangrynenko-cursorrules-drupal

Analyze Drupal codebases for OWASP-aligned security vulnerabilities.

1|Updated Mar 31, 2026

Search Tags:#code review #best practices #security #vulnerability #owasp #compliance #drupal

Ready to run

npx skills add https://github.com/mgifford/drupal-core --skill ivangrynenko-cursorrules-drupal-mgifford

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ivangrynenko-cursorrules-drupal
Source: https://github.com/mgifford/drupal-core/tree/main/.agents/skills/ivangrynenko-cursorrules-drupal
Command: npx skills add https://github.com/mgifford/drupal-core --skill ivangrynenko-cursorrules-drupal-mgifford

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides comprehensive security and best practice guidelines for Drupal development, helping developers prevent vulnerabilities and adhere to OWASP standards.

Core Features & Use Cases

Security Pattern Repository: Offers detailed security rules for Drupal components based on OWASP Top 10.
Automated Code Review Guidance: Facilitates identifying insecure practices in codebases during development and audits.
Use Case: A developer auditing a custom module can reference this Skill to ensure compliance with access control and cryptography standards.

Quick Start

Utilize the patterns and references in this Skill to review existing Drupal code for security gaps and implement best security practices seamlessly.

Frequently Asked Questions about ivangrynenko-cursorrules-drupal

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit Drupal code for OWASP security vulnerabilities?▼

Yes, reviewing custom Drupal modules for security gaps involves checking them against OWASP-aligned patterns. This ensures the codebase adheres to access control and cryptography standards while preventing common vulnerabilities during development.

What Drupal security best practices should I follow during code reviews?▼

Drupal security best practices during code reviews focus on applying OWASP Top 10 rules to components. This ensures adherence to access control and cryptography standards while identifying insecure coding patterns in custom modules.

Do I need a deep understanding of the Drupal API to implement secure coding standards?▼

Yes, implementing secure coding standards requires a comprehensive understanding of the Drupal API and security documentation. This knowledge is necessary to effectively apply access control rules and cryptography standards during module development.

How does applying OWASP patterns improve Drupal module development?▼

Applying OWASP patterns improves Drupal module development by providing detailed security rules that prevent vulnerabilities. It helps developers identify insecure practices early and ensures compliance with access control and cryptography standards.

What are the limitations of using static security patterns for Drupal codebase audits?▼

Static security patterns for Drupal audits require a comprehensive understanding of the Drupal API and security standards to be effective. They provide guidance for identifying insecure practices but may not catch all dynamic or context-specific vulnerabilities without manual verification.