rein-inspect

rein-inspect is a cursor rule for Cursor from jstxn/rein. It costs 20 tokens per session (1,250 once invoked), scanned A, original, MIT.

A documentation-focused tool for exploring an unfamiliar codebase and building a lasting map of its structure. The map is stored in `.rein/codebase/` with supporting topic documents.

In plain words
What is it for?
Use it to document the main parts of a repository, its boundaries, and important relationships. It is for inspection and reference, not for implementing fixes.
Why use it?
It prevents agents and developers from repeatedly rediscovering how the code is organized. Its findings are based on the actual code rather than guesses.

Cursor rule for Cursor

Written for Cursor: installed under .cursor/.

Good fit Use it to document the main parts of a repository, its boundaries, and important relationships. It is for inspection and reference, not for implementing fixes.

Compare 6 cursor rules from other repositories ↓
Install with agentmods
npx agentmods add rules/jstxn/rein/rein-inspect
View source ↗ jstxn/rein
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/jstxn/rein

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for rein-inspect

README.md
[![agentmods](https://agentmods.dev/badge/rules/jstxn/rein/rein-inspect.svg)](https://agentmods.dev/rules/jstxn/rein/rein-inspect)
Your own site
<a href="https://agentmods.dev/rules/jstxn/rein/rein-inspect"><img src="https://agentmods.dev/badge/rules/jstxn/rein/rein-inspect.svg" alt="Measured on agentmods" height="20"></a>
Per session 20 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,250 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00020 $0.01250
Opus 5 $0.00010 $0.00625
Sonnet 5 $0.00004 $0.00250
Haiku 4.5 $0.00002 $0.00125

Measured 8d ago against content hash 7d0c5abfc452, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

rein-inspect scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/rules/rein-inspect.mdc · 174 lines

How it starts

The opening of the file, as written. The whole thing — 174 lines — stays where its author put it; the contents beside it link to each section on GitHub.

rein-inspect

rein-inspect is a documentation-first reconnaissance skill. Its job is to understand a codebase carefully and maintain a durable map of that understanding under .rein/codebase/.

The skill produces:

  • .rein/codebase/MAP.md
  • topical companion docs under .rein/codebase/

It observes and records. It does not recommend fixes.

When to Use

Use this skill when:

  • you need a high-signal map of an unfamiliar repo or subsystem
  • a project has grown beyond what one README can orient cleanly
  • you want durable codebase reference docs for future agents or humans
  • repeated work keeps re-discovering the same architecture or boundary facts

Do Not Use

Do not use this skill when:

  • the user asked for implementation, refactoring, or repair rather than inspection
  • the repo already has a maintained codebase map that only needs a tiny manual update
  • you only need a quick one-turn explanation instead of persistent docs
  • you are not prepared to read enough of the codebase to support the claims you write

Operating Boundaries

  • Read before writing.
  • Follow actual code evidence, not guessed architecture.
  • Keep output rooted at .rein/codebase/.
  • Preserve and update existing docs in place.
  • Add a new topical doc only when the inspected codebase reveals a real uncovered area.
  • Record observations and evidence-backed inferred risks.
  • Do not propose fixes, refactors, or migrations.
  • Do not edit application code as part of this skill unless the user explicitly asked for code changes outside the inspection pass.

Output Contract

Always maintain this docs tree:

.rein/
  codebase/
    MAP.md
    <topic>.md
    <topic>.md

MAP.md is the entrypoint. It should explain the major sections of the codebase and link to the topical docs.

Topical docs should be created from discovered domains, not a hard-coded list. Examples might include:

  • architecture.md
  • frontend.md
  • backend.md
  • data-flow.md
  • testing.md
  • tooling.md

The exact set depends on the repo.

Read the full file on GitHub · 174 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 174 lines · 20 tokens per session scan A 7d0c5abfc452

Subscribe to this mod's changes

rein-inspect is a cursor rule published in the GitHub repository jstxn/rein (12 stars, last pushed 4mo ago), licensed MIT. It adds 20 tokens to every session and 1,250 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.