
Security News
Meet Socket at Black Hat Europe and BSides London 2025
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.
⚡ One config to rule them all. Centralized AI assistant configuration management - generate rules for Claude, Cursor, Copilot, Windsurf and more from a single YAML file.
AI-powered development governance. One config to rule them all.
Documentation: goldziher.github.io/ai-rulez
CLAUDE.md, .cursorrules, .windsurfrules, MCP configs, and more).
ai-rulez analyzes your repo and generates native configuration files for every assistant.ai-rulez enforce to catch violations, apply fixes, and gate merges with configurable quality thresholds..gitignore updates, Git hook integration (lefthook, pre-commit, husky), and CI ready commands.# Analyze your project and scaffold configuration
npx ai-rulez@latest init "My Project" --preset popular
# Generate all assistant configuration files
npx ai-rulez@latest generate
# Check for violations (read-only)
uvx ai-rulez@latest enforce --agent claude
# Apply fixes or run multi-agent reviews
uvx ai-rulez@latest enforce --agent claude --fix
uvx ai-rulez@latest enforce --agent gemini --review --review-iterations 2
# Detect pre-commit, lefthook, or husky and add ai-rulez validation
npx ai-rulez@latest init --setup-hooks
--setup-hooks adds the official hooks for the detected system and keeps existing configuration intact.
ai-rulez.yaml$schema: https://github.com/Goldziher/ai-rulez/schema/ai-rules-v2.schema.json
metadata:
name: "My SaaS Platform"
presets:
- "popular" # Claude, Cursor, Windsurf, Copilot, Gemini
rules:
- name: "Go Code Standards"
priority: high
content: "Follow standard Go project layout and export only what is necessary."
sections:
- name: "Project Structure"
priority: critical
content: |
- `cmd/`: Main application entry point
- `internal/`: Private application code
- `pkg/`: Public-facing libraries
agents:
- name: "go-developer"
description: "Expert Go developer focused on idiomatic code and tests."
mcp_servers:
- name: "ai-rulez"
command: "npx"
args: ["-y", "ai-rulez@latest", "mcp"]
description: "Configuration management server"
npx ai-rulez@latest ... for Node/JS environmentsuvx ai-rulez@latest ... for Python usersgo run github.com/Goldziher/ai-rulez/cmd@latest ... for Go projectsbrew install goldziher/tap/ai-ruleznpm install -g ai-rulezpip install ai-rulezgo install github.com/Goldziher/ai-rulez/cmd@latestOfficial pre-commit hooks
repos:
- repo: https://github.com/Goldziher/ai-rulez
rev: v2.3.4
hooks:
- id: ai-rulez-validate
- id: ai-rulez-generate
CLI hook setup – Run ai-rulez init --setup-hooks to auto-configure pre-commit, lefthook, or husky if they are present in your repo.
No-Go requirement – Hooks use scripts/pre-commit/run-ai-rulez.sh, which fetches the correct prebuilt binary on-demand (override with AI_RULEZ_BINARY if you already have one installed).
CI/CD examples – See the Enforcement guide for GitHub Actions, pipeline tips, and advanced workflows.
We welcome contributions! Read the CONTRIBUTING.md for development setup, coding standards, and release process details.
FAQs
⚡ One config to rule them all. Centralized AI assistant configuration management - generate rules for Claude, Cursor, Copilot, Windsurf and more from a single YAML file.
The npm package ai-rulez receives a total of 53 weekly downloads. As such, ai-rulez popularity was classified as not popular.
We found that ai-rulez demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.