Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/jacobinwwey/notemdpro/cursorrulesgit clone --depth 1 https://github.com/Jacobinwwey/notemdproWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00421 | $0.00421 |
| Opus 5 | $0.00211 | $0.00211 |
| Sonnet 5 | $0.00084 | $0.00084 |
| Haiku 4.5 | $0.00042 | $0.00042 |
Grade A, and why
cursorrules scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Cursor Rules for NoteMD Pro
// This file configures Cursor AI to automatically leverage the NoteMD Pro skills.
You are interacting with a vault/project that has the notemdpro skills library installed.
Global Injunctions
- Never Hallucinate Obsidian APIs: When acting on Markdown files, use standard Node.js or Python FileSystem commands. You are acting as an independent Agent, not an Obsidian plugin.
- Always Check OOM Safety: Before performing actions on a batch of Markdown files, or calculating character/token lengths, proactively search for and sanitize Base64 strings (
![[data:image...]]). - Follow the Skills Library: When the user asks you to perform tasks matching the descriptions below, you MUST first execute a
treeor list of theskills/folder, find the relevantSKILL.md, read it, and execute its specific workflow.
The NoteMD Pro Workflow Map
- To fetch web research before writing: Read
skills/web-researcher/SKILL.md. - To generate a new markdown document from a prompt: Read
skills/content-generator/SKILL.md. - To fix broken mermaid diagrams inside a markdown file: Read
skills/mermaid-healer/SKILL.md(Prioritize the 37+ heuristic regexes!). - To fix broken LaTeX formulas: Read
skills/formula-healer/SKILL.md. - To extract core keywords and knowledge concepts from a note: Read
skills/concept-extractor/SKILL.md. - To add Wikipedia-style
[[Dual-Links]]across the vault based on extracted concepts: Readskills/link-analyzer/SKILL.md. - To process an entire folder: Read
skills/batch-processor/SKILL.md(Crucial for handling HTTP 429 errors).
When a user asks: "Extract concepts from this note", you must literally run a tool to view skills/concept-extractor/SKILL.md before doing anything else.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 22 lines · 421 tokens per session scan A b6ade0310fce
cursorrules is a cursor rule published in the GitHub repository Jacobinwwey/notemdpro (2 stars, last pushed 3mo ago), licensed MIT. It adds 421 tokens to every session, about $0.0021 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other cursor rules, from other repositories
code-optimization
Guidelines for optimizing duplicate and poorly structured code.
implementation-workflow
Required plan-first workflow for any implementation request (steps 1–5).
memory-bank
You are an expert software engineer with a unique characteristic: your memory resets completely between sessions. This isn't a limitation - it's what drives you to maintain perfect documentation. At the beginning of each dialogue, you rely ENTIRELY on your Memory Bank to understand the project and continue work…
nauro-context
Writes durable shared context into Nauro's project store so other agents (a later session or a parallel one) can discover and pull it, finds and reads context another agent left, or captures a resumable brief so your own next session in this environment picks up cleanly. Three modes. Author writes a shared brief for…
language-agnostic-patterns
Language-agnostic programming patterns: SOLID, design patterns, clean code, and architecture. Load when refactoring, designing abstractions, or reviewing structure — not for everyday syntax.
cursor-tools-mastery
Cursor 3.7 runtime guide: choose the right tool, canvases, Design Mode, /worktree, /best-of-n, Await, and parallel execution where safe.