Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/chinawsb/daofy/coding_rulesgit clone --depth 1 https://github.com/chinawsb/daofyWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00277 | $0.00277 |
| Opus 5 | $0.00138 | $0.00138 |
| Sonnet 5 | $0.00055 | $0.00055 |
| Haiku 4.5 | $0.00028 | $0.00028 |
Grade A, and why
CODING_RULES scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
DemoApp 编码规范
命名规则
- 类型名: T + 大驼峰（如 TJsonConfigManager）
- 方法名: 大驼峰（如 LoadConfig、GetValue）
- 变量名: L + 大驼峰（局部）、F + 大驼峰（字段）
- 参数名: A + 大驼峰
- 常量名: 全大写 + 下划线（如 DEFAULT_PORT）
- 接口名: I + 大驼峰
格式规则
- 缩进: 2 空格
- begin/end 另起一行
- uses 子句按字母序排列，系统单元在前、自定义单元在后
异常处理
- 必须使用 try/finally 保护资源
- catch 使用具体异常类型，不使用 except(Exception): 兜底
- 自定义异常继承 Exception
文件头
每个单元文件头部包含单元用途的简短注释。
审核要求
- 检查所有对象创建是否有对应的 Free
- 检查 try/finally 是否配对
- 检查魔法数值是否定义为常量
- 检查函数长度（不超过 80 行）
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 29 lines · 277 tokens per session scan A e22abd171621
CODING_RULES is a cursor rule published in the GitHub repository chinawsb/daofy (101 stars, last pushed 3d ago), licensed MIT. It adds 277 tokens to every session, about $0.0014 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
wrapup
End-of-session wrap-up: summarizes the session and pushes a log to the project's linked NotebookLM notebook. Activate with @wrapup in chat, or "wrap up", "save this session", or "end of session".
documentation-standards
WHEN creating or modifying documentation files ENSURE consistent formatting and organization standards.
docs-structure
Best practices for organizing the docs/ directory.
archive
Cursor rule "archive" from savagelysubtle/BIG-BRAIN-Memory-Bank, covering task archiving protocol, 📁 archive setup, 📋 archive format, task: [task name] (v1.0) and implementation results.
reflection-format
Reflection format and requirements.
050-plan
When the user types /plan or asks to create a project plan, feature PRD, or retrospective.