v1.2.0 — Cursor CLI support

v1.2.0

Ship MVPs fast without shipping a breach. Dual-platform: Claude Code plugin + Cursor CLI support.

Added — Cursor CLI (cursor/)

• 11 commands (.cursor/commands/): /preflight /secrets /scan /recon /trace /vuln /threat-model /triage /fix /finding /security-review
• Rules (.cursor/rules/*.mdc): always-apply operating rules + stack footgun guides (Next.js/Vercel, Supabase, Stripe, Node/Express)
• beforeReadFile hook that denies reading raw secret files into model context
• AGENTS.md + install.sh for one-command install into any project

Platform mapping

• Injection guard → always-apply rule (Cursor beforeReadFile can only allow/deny, not inject context)
• Security-reviewer agent → /security-review command

Fixed

• scripts/preflight-check.sh marked executable

Docs

• Sharpened marketplace listing description (value-first framing)

Full history: PRs #1 (marketplace plugin + MVP commands/skills), #2 (Cursor CLI), #3 (version bump), #4 (marketplace description).