4 条规则
# Zero-X Explain Finding
Use this command to explain a specific finding reported by a previous Zero-X scan.
When you run this command:
- Ask the user which finding they want to understand, or infer it from the currently selected diagnostic or finding in the editor.
- Extract the `id` of that finding (the `id` field from the Zero-X scan result).
- Call the `zerox` MCP server and invoke the `zerox_explain_finding` tool with:
```json
{
"finding_id": "<finding-id>"
}
```
Present the explanation returned by Zero-X, including:
- A plain-language description of the issue.
- Why it is a problem in the given context.
- Recommended remediation steps and, if available, a concrete code-level fix.
Offer to apply or adapt the recommended fix to the user’s code, and suggest re-running `zerox.scanFile` or `zerox.scanProject` afterward to verify remediation.相关插件
Zero-X Security↓ 12
Zero-X MCP server 将 Zero-X 的安全与分析能力直接带入你在 Cursor 中的 AI 编码工作流。no-secrets↓ 44
no-secrets:检测代码中可能的密钥泄露,建议环境变量/Secret Manager 修复,推送前警告。Acutis↓ 6
对 AI 生成代码进行零信任安全验证,详情见 https://acutis.dev。filestack↓ 6
Filestack 官方插件,可直接在 Cursor 中上传文件、构建转换并生成安全策略。contrastapi↓ 1
面向 AI agent 的安全情报 MCP 服务器,含 47 个工具、7 个资源与 3 个 prompt:CVE/EPSS/KEV(34 万+)、MITRE CWE/ATLAS/D3FEND、域名侦察、IOC 威胁情报、OSINT、代码安全与网络情报,免费且无需 API key。operant-mcp↓ 1
安全测试 MCP server,含 51 个工具,用于渗透测试、网络取证、内存分析与漏洞评估。ZPL Engine MCP↓ 0
面向金融、游戏、AI、加密的 AIN 偏差与稳定性引擎,提供 11 个类别共 68 个工具,进行数学中立性评分(0.1-99.9),用于组合平衡、掉落表公平性、模型偏差、大户集中度与合规评分等,免费版每月 5K token。Go↓ 4.5k
Go 在 Cursor 中的规则与最佳实践。