Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/dmenchaca/webflow-to-react/performance-cwvgit clone --depth 1 https://github.com/dmenchaca/webflow-to-reactWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00436 |
| Opus 5 | $0.00000 | $0.00218 |
| Sonnet 5 | $0.00000 | $0.00087 |
| Haiku 4.5 | $0.00000 | $0.00044 |
Grade A, and why
performance-cwv scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Core Web Vitals (any Webflow → TanStack site)
Read gotchas.md § Core Web Vitals and playbook.md §9.2.
Principles
- Per-site — hero markup, font files, and LCP image differ per export. Copy patterns from
templates/, not hard-coded domains or selectors from one project. - Third-party scripts — only if the project uses analytics; defer lightweight hosts (example: templates/PlausibleLoader.tsx when Plausible is chosen) after
load+requestIdleCallback. GTM / heavy tag managers are not the same pattern — different cost model. - Font preload — only above-the-fold
woff2URLs that matchsite-fonts.css;crossOrigin: 'anonymous'on link tags. - CLS — optional last-imported CSS for percentage-based overlays; verify in DevTools per export.
- Render-blocking CSS — a single large bundle is normal; “fixing” the audit often needs critical CSS or route splits — don’t promise a green score without scope.
Netlify local vs production
Use web/netlify.toml from templates/web-netlify.toml when the Netlify Vite plugin’s root is web/ — see gotchas.md § Netlify and netlify-tanstack-deploy.mdc.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 22 lines · 0 tokens per session scan A 8c290aef2f5c
performance-cwv is a cursor rule published in the GitHub repository dmenchaca/webflow-to-react (27 stars, last pushed 2mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 436 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
vue
Cursor rule "vue" from un-pany/v3-admin-vite, covering vue 开发规范, 代码风格, 命名, api and props.
project
Cursor rule "project" from un-pany/v3-admin-vite, covering 项目开发规范, 导入, 编码, 代码检查 and 本地环境.
index
你是一位高级前端工程师，精通前端架构，精通 Vue3、Vue Router、Pinia 等前端框架，精通 TS、JS 等前端语言，精通 Git 操作.
cursorrules
this is a simple react and vite project that allows users to manage a JSON file on their computer with a nice UI.
cursorrules
JiwuChat 🍂 - A lightweight cross-platform instant messaging app with integrated AI assistants (DeepSeek/Gemini/Kimi). Features real-time messaging, audio/video calls, multi-device sync, and customizable themes. Built with Vue3 & Tauri2 🍒.
api
USE WHEN: Defining HTTP requests, endpoints, and handling API responses.