One loadout uses Cursor so far. It lists rules, skills and MCP configs with install paths for every supported agent.
Every one installs for Claude Code, Codex CLI, Cursor, Gemini CLI, Antigravity CLI and GitHub Copilot unless its card says otherwise.
A Python guard for Cursor's permission hooks that blocks risky commands, secret reads and unlisted MCP servers, set to fail closed, with a config checker and self-test.
Tools these loadouts expect: python3. Not sure what your agent will load once they're in? Check your setup or see which files each agent reads.
Set failClosed on every permission hook, make the guard exit non-zero on anything unexpected, and keep self-tests for allow, deny and crash cases.
Looking for something narrower? Search within Cursor or filter everything.