Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/dmno-dev/varlock/style-guidegit clone --depth 1 https://github.com/dmno-dev/varlockWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01218 |
| Opus 5 | $0.00000 | $0.00609 |
| Sonnet 5 | $0.00000 | $0.00244 |
| Haiku 4.5 | $0.00000 | $0.00122 |
Grade A, and why
style-guide scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 115 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Varlock Documentation and Codebase Style Guide
description: | This rule establishes standards for writing and editing documentation, comments, and prose in the Varlock codebase. It aims to ensure clarity, professionalism, and consistency across all written materials, including READMEs, guides, and inline documentation.
filters:
Applies to all Markdown, MDX, and documentation files
- type: file_extension pattern: ".(md|mdx|mdc)$"
Applies to docstring and comment blocks in code
- type: content pattern: "(?s)(/*.?*/|//.?$|#.*?$)"
actions:
-
type: suggest message: | When writing or editing documentation, comments, or prose:
-
Clarity and Conciseness
- Use clear, direct language. Avoid unnecessary words or repetition.
- Prefer active voice and short sentences.
- Avoid redundancy (e.g., do not restate the same point in different ways).
-
Professional and Consistent Tone
- Maintain a professional, helpful, and neutral tone.
- Use consistent terminology for technical concepts (e.g., "environment flag," "environment-specific file").
- Use standard terms for configuration, environment variables, and deployment concepts.
-
Grammar and Punctuation
- Use correct grammar and spelling throughout.
- End all bullet points with a period or none, but be consistent within each list.
- Use en dashes (–) for ranges or parenthetical statements, not hyphens (-).
- Use American English spelling unless otherwise specified.
-
Formatting and Structure
- Separate code blocks and prose clearly. Do not embed explanations within code blocks.
- Use Markdown formatting for emphasis, lists, and headings.
- For lists, use consistent bullet or numbering style. Indent nested lists properly.
- Use italics or bold for emphasis, but avoid overuse.
-
Technical Accuracy
- Use correct and up-to-date technical terms (e.g., "IntelliSense" not "intellisense").
- Reference official documentation for third-party tools or platforms when possible.
- When describing configuration, use the exact variable or file names as they appear in code.
-
Examples and Code
- Place code examples in fenced code blocks with the appropriate language tag.
- Do not alter code examples for style unless correcting an error or inconsistency.
- Keep code and prose separate; do not mix explanations into code blocks.
-
Environment and Configuration Concepts
- Use "environment flag" for the concept controlling which environment-specific files are loaded.
- Use "environment-specific file" for files like
.env.development,.env.production, etc. - Use "non-sensitive" and "sensitive" for configuration values, and explain the criteria for each.
-
Warnings and Notes
- Use blockquotes (>) for warnings, notes, and tips. Start with "NOTE –", "TIP –", or "WARNING –" as appropriate.
- Be concise and direct in warnings and notes.
-
examples:
-
input: | You need to make sure to tell your package manager to override all the resolution of @next/env with @varlock/nextjs-integration, otherwise it won't work right. output: | You must tell your package manager to override all resolutions of
@next/envwith@varlock/nextjs-integration. -
input: | While .env.schema, .env, and .env.local will always be loaded, loading env-specific files is controlled by a thing called an environment flag, which you can set however you want. output: | While
.env.schema,.env, and.env.localwill always be loaded, loading environment-specific files is controlled by the concept of an 'environment flag.' -
input: | NOTE - All non sensitive items will be bundled at build time via varlock's ENV object, but process.env replacements will only include NEXT_PUBLIC_ prefixed items. (be careful!) output: | NOTE – All non-sensitive items will be bundled at build time via varlock's
ENVobject, whileprocess.envreplacements will only includeNEXT_PUBLIC_-prefixed items.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 115 lines · 0 tokens per session scan A a45b771984a9
style-guide is a cursor rule published in the GitHub repository dmno-dev/varlock (4,238 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,218 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
090-env-schema
090: Environment variable schema.
essential-core-lifecycle
Always-on core execution lifecycle across Define, Plan, Build, Verify, Review, and Ship.
secrets
Secrets management, environment variables, and secure configuration.
cursorrules
Read AGENTS.md before writing any code. It carries the engineering standard this repository is held to — control flow, error handling, immutability, structure — plus the architecture, the invariants and why each one exists. CLAUDE.md is the short version: gates and traps.
project
Engineering standard for this repository.
graphify
This project has a graphify knowledge graph at graphify-out/.