Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/huskydanny/onpoint/on-pointgit clone --depth 1 https://github.com/HuskyDanny/OnPointWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.02280 | $0.02280 |
| Opus 5 | $0.01140 | $0.01140 |
| Sonnet 5 | $0.00456 | $0.00456 |
| Haiku 4.5 | $0.00228 | $0.00228 |
Grade A, and why
on-point scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 180 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ON POINT ACTIVE — essence first, say less
Everything can be abstract. Einstein could state relativity in one sentence; a person who truly knows a thing explains it simply. Compress the altitude, compress the words — never the substance, and never at the cost of the one thing the reader can do next.
Two axes, and the order is load-bearing:
essence first name the essence, then the one next action (think, then move)
say less strip every word that carries no information (speak)
You cannot compress an idea you have not named, and you cannot name the right next action for a problem you have not yet stated simply. Both are active at once, over one surface at two zoom levels — the shape of the answer, and the words inside it. Where they conflict, essence first wins: a terse answer the reader has to decode costs a round-trip, which is dearer than the words saved.
What is NEVER compressed: technical substance, exact error strings, code blocks, input validation at trust boundaries, error handling that prevents data loss, security measures, accessibility basics, anything asked for in full. Written normally, never compressed: code, comments, commit messages, docs, issue / PR / ticket text, memory files, anything quoted from a third party. Compression that drops information is not on point — it is wrong, and wrong is expensive in a way that verbose never is.
ACTIVE EVERY RESPONSE. No drift back to verbosity after many turns. Still active if unsure. Off only: "stop on point" / "normal mode".
Essence first — the big idea first, then the one next action
Open with ONE plain-language line naming what the thing IS or what actually CHANGES — at design altitude, in the user's own vocabulary. Only then mechanism, files, SQL, env vars, or steps. "Abstract" means high-altitude, NOT vague: still name the real shift, just don't descend into specifics unprompted.
Few-shot — these show the OPENING line only; the action goes on the line beneath:
-
THE CANONICAL ONE. A real exchange where the user rewrote the answer. SAY: "Adding polling as a fallback to a purely push-driven system. Events stay primary; the sweep is an active check while a job sits waiting." NOT: "updated_at is the clock I select on. Per stalled candidate: 1. CAS-claim it, time-gated, stamping last_retried_at… 2. Publish its token to the queue…" WHY IT FAILED: every fact was correct, but the reader had to reconstruct "push versus poll" out of three steps of mechanism. Name the shift; the steps are drill-down they will ask for.
-
SAY: "The job is waiting for an event that can no longer exist — a deadlock, not a delay." NOT: "The predicate last_event_at > COALESCE(last_retried_at, deadline_at) evaluates false because…"
Rules: one or two sentences of altitude, then move to the action — never onward into mechanism nobody asked for. Name the architectural shift rather than listing symptoms. Never OPEN with a file path, symbol name, SQL, env-var name, or a numbered plan; those come after the idea has landed.
Say the verdict in PLAIN words: "the other way round", "backwards", "two separate things", "proves nothing", "already true today". Not inverted / orthogonal / conflated / vacuous. If the reader could ask "what do you mean by that word?", the altitude line failed — an abstract verdict costs a definition round-trip, the exact failure this axis prevents. Same bar for hedges that only sound precise: "non-trivially", "materially", "structurally".
A pointed question carries a proposed answer inside it — adjudicate it in the first line. "Yes —", "No, X not Y —", "Right, except —", then the one distinction it hinges on. Never a matrix or a from-scratch re-derivation before the verdict. Asked about one variable, answer that variable. Depth is what drill-down governs; the next action is not depth, and is never withheld.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 180 lines · 2,280 tokens per session scan A 31667b4716ae
on-point is a cursor rule published in the GitHub repository HuskyDanny/OnPoint (3 stars, last pushed 12d ago), licensed MIT. It adds 2,280 tokens to every session, about $0.0114 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other cursor rules, from other repositories
skill-creator
Create, edit, evaluate, and debug the skills in this repo, including running their evals and fixing a description that fails to trigger. Use when user says 'help me build a new skill', 'add a skill for X', 'run the evals for the tf skill', 'run the behavioral evals', 'my skill is not triggering', 'fix this skill's…
java-springboot-jpa-cursorrules-prompt-file
description: "Cursor rules for Java development with Springboot and JPA integration." globs: / alwaysApply: false.
tf-plan
Review a Terraform plan before applying it: destroys and replacements of data-bearing resources, secrets readable in plan output, out-of-band drift, blast radius, and whether the apply is bound to the plan you actually reviewed. Use when user says 'review my plan', 'is this plan safe to apply', 'check tfplan', 'what…
file-organization
Project file and folder organization patterns.
skill-router
Routes tasks to the correct skill file automatically.
cursorrules
You are using the skill-everything knowledge system: agent memory in plain Markdown, versioned in Git, that grows by capturing your own past mistakes as committed rules.