メニュー
Drupal development and security patterns from Ivan Grynenko's cursor rules. Covers OWASP Top 10, authentication, access control, injection prevention, cryptography, configuration, database standards, file permissions, and more.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Comprehensive AI-assisted accessibility practices for Drupal Core, including 100 validated user stories, automated workflows, module testing, and patch evaluation frameworks. Use when implementing, testing, or evaluating accessibility in Drupal — covers keyboard navigation, screen reader compatibility, WCAG 2.2 AA workflows, Playwright test suites, axe-core scanning, and patch evaluation.
DOM, theming, and CSS accessibility rules for Drupal templates and stylesheets. Use when generating, reviewing, or modifying *.html.twig, *.css, *.pcss, *.scss, theme libraries, layout regions, or any markup that ships to the browser. Covers semantic HTML over ARIA, the Drupal hide-content-properly contract (visually-hidden vs hidden vs aria-hidden vs the @media (scripting) js-show/js-hide pattern), WCAG 2.2 SC 2.5.8 24×24 px target size enforcement, focus-visible outlines, and reduced-motion handling. Loaded by the drupal-accessibility dispatcher.
Accessibility rules for Drupal JavaScript behaviours, AJAX, modals, and the test layers that cover them. Use when generating, reviewing, or modifying *.js, Drupal.behaviors, AJAX commands, dialog/modal code, or *Test.php that exercises the UI. Mandates Drupal.announce() over hand-rolled aria-live, focus trapping for modals and focus return for AJAX triggers, Playwright (not Nightwatch) for browser-level accessibility scans per core issue
Server-side accessibility rules for Drupal Form API and render arrays. Use when generating, reviewing, or modifying *.module, *.inc, *Form.php, controllers, or any PHP that builds a render array. Covers required
Issue-authoring and review rules for Drupal accessibility work. Use when drafting an accessibility issue, merge-request description, or change record, or when reviewing one. Enforces the structured field block (Bug ID instance/pattern, URL, simplified and full-DOM XPath, WCAG SC with level, tool rule ID, severity, frequency, screen type, colour mode), the HTML snippet, AI disclosure, one-issue-per-criterion scoping, and the manual-checks-required-before-RTBC rule. Pair with REFERENCE_BUG_REPORT.md in this directory for the fillable template. Aligned with the upstream ACCESSIBILITY_BUG_REPORTING_BEST_PRACTICES guide. Loaded by the drupal-accessibility dispatcher.
Dispatcher for Drupal accessibility guidance. Use when generating, reviewing, or modifying Drupal code, theming, JavaScript, or test coverage with accessibility implications, or when drafting accessibility issues for the issue queue. Routes work to a specialised sub-skill based on file type or task — server-side Form API (drupal-a11y-fapi), DOM and CSS (drupal-a11y-dom), interaction and testing (drupal-a11y-dynamic), or QA and issue authoring (drupal-a11y-qa). Enforces Drupal Accessibility Coding Standards, WCAG 2.2 AA (including the new SC 2.5.8 24×24 px target size), Drupal-native hiding patterns over hand-rolled ARIA, and the move from Nightwatch to Playwright plus Axe-core inside PHPUnit.
| name | ivangrynenko-cursorrules-drupal |
| description | Drupal development and security patterns from Ivan Grynenko's cursor rules. Covers OWASP Top 10, authentication, access control, injection prevention, cryptography, configuration, database standards, file permissions, and more. |
Source: Ivan Grynenko - Cursor Rules Author: Ivan Grynenko License: MIT
Activates when working with Drupal security topics including:
All topics are available as references in the /references/ directory.
Each reference contains:
See /references/ directory for complete list.
To update: Run .claude/scripts/sync-ivan-rules.sh
