#windsurf

.cursorrules and agents.md: the config backdoor

IDE rule files grant persistent capability to every AI agent that touches the repo. They are rarely code-reviewed. Here are the attack patterns and the detection signatures.