Add Zero-Trust Data Sanitization & PII Redaction Cursor rule

[moxno]

Summary

Adds a canonical .mdc rule providing guidance for handling sensitive codebases, credentials, and customer PII in Cursor workflows.

Contribution Type

• New rules/*.mdc rule

Value To Cursor Users

Helps developers working in enterprise or compliance-scoped codebases (handling .env files, API keys, database dumps, customer PII) prevent accidental leakage of sensitive tokens to LLM contexts and ensure local restoration when applying patches.

Added Or Changed Files

• rules/privacyscrubber-zero-trust-pii-redaction.mdc - Project rule defining safe handling for credentials, PII masking, and local detokenization.
• README.md - Added link under ### Security.

Quality Checklist

• The contribution includes original rule content, or clearly credits the source.
• New rule files use a descriptive kebab-case filename, such as react-typescript.mdc.
• New rules/*.mdc files include frontmatter with a non-empty description, relevant globs, and alwaysApply: false unless the rule is universal.
• README links use canonical GitHub URLs for repo files and point to the correct category.
• The text is neutral and useful, not sales copy.
• This is not a standalone external tool, product, directory, marketplace, or service listing.
• No secrets, tokens, affiliate links, tracking links, or unrelated product claims are included.
• I checked for duplicate or near-duplicate existing entries.

Notes For Maintainers

Rule is modeled after existing Security/DevSecOps rules to provide practical patterns for data sanitization in Cursor.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 68f11fc6-3d28-46a6-8ed0-5837bc9f0789

📥 Commits

Reviewing files that changed from the base of the PR and between b044f95 and d64ecbc.

📒 Files selected for processing (2)

• README.md
• rules/privacyscrubber-zero-trust-pii-redaction.mdc

Included review availability: Your plan provides up to 10 included reviews per hour; 9 remain after this review.

---

📝 Walkthrough

Walkthrough

The change adds a Cursor rule for local secret and PII sanitization, restoration, and verification. The README Security section links to the new rule.

Changes

Privacy Scrubber Rule

Layer / File(s)	Summary
Rule definition and README index rules/privacyscrubber-zero-trust-pii-redaction.mdc, README.md	The new rule defines secret protection, domain-based PII masking, local-only sanitization, and restoration directives. The README links to the rule from the Security section.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Feature

Merge Risk: ⚪ Minimal · up to d64ec

This change only adds a documentation rule describing local secret and PII redaction practices and links it from the README Security section. It does not alter any running behavior, so there is no meaningful merge risk.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly and concisely identifies the main change: adding a Zero-Trust Data Sanitization and PII Redaction Cursor rule.
Description check	✅ Passed	The description includes all required sections, explains the rule's user value, lists changed files, completes the quality checklist, and provides maintainer notes. It is specific and aligned with the…

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}