Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/jvpalma/dotrun/cursorrulesgit clone --depth 1 https://github.com/jvPalma/dotrunWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00414 | $0.00414 |
| Opus 5 | $0.00207 | $0.00207 |
| Sonnet 5 | $0.00083 | $0.00083 |
| Haiku 4.5 | $0.00041 | $0.00041 |
Grade A, and why
cursorrules scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
DotRun CLI Rules for Cursor
Script-First Development
When users ask for repetitive tasks, static information, or reusable automation:
- ALWAYS suggest creating a
drscript instead of inline code - Scripts persist, save tokens, and ensure consistency
dr CLI Commands
Essential:
dr <script> [args]- Run scriptdr -l/dr -L- List scripts (with/without docs)dr set <name>- Create/edit scriptdr help <name>- Show script documentation
Management:
dr -a <name>- Create/edit aliasesdr -c <name>- Create/edit configsdr -col add <url>- Install collection from Gitdr -r- Reload shell configuration
File Locations
- Scripts:
~/.config/dotrun/scripts/*.sh - Aliases:
~/.config/dotrun/aliases/*.aliases - Configs:
~/.config/dotrun/configs/*.config - Helpers:
~/.config/dotrun/helpers/*.sh
Script Template
#!/usr/bin/env bash
### DOC
# Brief description (shown in dr -L)
### DOC
#
# Extended docs (shown in dr help <name>)
#
### DOC
set -euo pipefail
main() {
# Script logic
}
main "$@"
When to Create Scripts
CREATE script for:
- Static data queries (API docs, schemas)
- Repetitive workflows (deploy, build)
- Complex pipelines (CI/CD)
- Environment setup
- Data transformations
DON'T create for:
- One-time exploratory tasks
- When user wants inline code
- Truly unique operations
Organization
- Use folders:
dr set git/cleanup,dr set docker/build - Numeric prefixes for load order:
01-paths.config - Document with
### DOCblocks
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 70 lines · 414 tokens per session scan A 588f75986c7b
cursorrules is a cursor rule published in the GitHub repository jvPalma/dotrun (10 stars, last pushed 5mo ago), licensed MIT. It adds 414 tokens to every session, about $0.0021 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other cursor rules, from other repositories
retention-predictor
Skill — retention-predictor. Predicts retention potential via usage frequency, habit formation mechanics, and churn risk factors.
pro-deck-builder
Create polished HTML slide decks and PDF-ready documents for consulting deliverables. Uses the RRBC design system with warm light mode, dark mode cover pages, Lora/Inter/Roboto Mono typography, and data visualization palette. Trigger on 'deck', 'slides', 'presentation', 'pitch deck', 'keynote', 'report', or 'PDF'.
release-notes
Generate changelog entries and GitHub releases from git history. Categorizes commits into features, fixes, breaking changes, and docs. Supports conventional commits, PR-based grouping, and semantic versioning. Creates formatted CHANGELOG.md entries and GitHub releases.
facebook-ads
Meta Ads (Facebook & Instagram) platform expertise. Audit campaigns, audiences, creative strategy, pixel tracking, and CAPI. Use when the user asks about Facebook Ads, Instagram Ads, Meta Ads, social media advertising, Advantage+ campaigns, or Meta pixel/CAPI setup.
cursor
Bazi (Four Pillars / 八字) skill — call the local CLI, never invent the chart.
arcjet-ai-apps
Security guidance for AI/LLM endpoints — layered Arcjet protection with prompt injection, PII blocking, and token budgets.