Instruction file imported from compozy/gograph (.cursor/rules/quality-security.mdc). Copyright stays with the author.

Quality and Security Standards

Name: quality-security
Author: compozy

Security

<security_requirements type="critical">

NEVER commit API keys or secrets - use environment variables
NEVER expose secrets in logs - use structured logging without sensitive data
Handle redaction markers: [REDACTED:amp-token] indicates removed secrets - do not overwrite with markers
Use the gosec linter to identify security issues
Validate all inputs, especially those from external sources
Follow secure coding practices for authentication and authorization </security_requirements>

Performance

<performance_guidelines>

Minimize allocations in hot paths
Consider resource usage and efficiency </performance_guidelines>

Specific Linter Rules to Follow

<linter_rules type="mandatory">

bodyclose: Always close HTTP response bodies
errcheck: Check error returns from all function calls
goconst: Extract repeated string literals into constants
gocritic: Follow idiomatic Go practices
staticcheck: Address all static analysis warnings
unused: Remove unused code
whitespace: Maintain consistent whitespace </linter_rules>

{ "ocm": "1", "id": "compozy-gograph-quality-security-rule", "kind": "skill", "name": "quality-security", "description": "Security, performance, and code quality standards for Compozy development including linter rules, security requirements, and performance guidelines", "publisher": "compozy", "version": "1.0.0", "capabilities": { "domains": [ "coding" ], "tags": [ "skill-md", "github-cursor-rules" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Security, performance, and code quality standards for Compozy development including linter rules, security requirements, and performance guidelines" ], "primary": false, "metadata": { "source": { "provider": "github-cursor-rules", "repository": "https://github.com/compozy/gograph", "path": ".cursor/rules/quality-security.mdc", "ref": "340197a1c9c8c0707346f06c68a629ee91202cde", "url": "https://github.com/compozy/gograph/blob/340197a1c9c8c0707346f06c68a629ee91202cde/.cursor/rules/quality-security.mdc", "key": "compozy/gograph/.cursor/rules/quality-security.mdc" }, "applies_to": [ "**/*.go", "**/Makefile", "**/*.yml", "**/*.yaml" ] }, "instructions": "# Quality and Security Standards\n\n## Security\n\n<security_requirements type=\"critical\">\n- **NEVER commit API keys or secrets** - use environment variables\n- **NEVER expose secrets in logs** - use structured logging without sensitive data\n- **Handle redaction markers:** `[REDACTED:amp-token]` indicates removed secrets - do not overwrite with markers\n- Use the gosec linter to identify security issues\n- Validate all inputs, especially those from external sources\n- Follow secure coding practices for authentication and authorization\n</security_requirements>\n\n## Performance\n\n<performance_guidelines>\n", "cost": { "context_tokens": 286 } }

quality-security

About

Quality and Security Standards

Security

Performance

Specific Linter Rules to Follow

Use it

Manifest

Reviews