Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/madebyaris/advance-minimax-m3-cursor-rulesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/madebyaris/advance-minimax-m3-cursor-rules/minimax-m3-core)<a href="https://agentmods.dev/rules/madebyaris/advance-minimax-m3-cursor-rules/minimax-m3-core"><img src="https://agentmods.dev/badge/rules/madebyaris/advance-minimax-m3-cursor-rules/minimax-m3-core/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/madebyaris/advance-minimax-m3-cursor-rules/minimax-m3-core"><img src="https://agentmods.dev/badge/rules/madebyaris/advance-minimax-m3-cursor-rules/minimax-m3-core.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03154 | $0.03154 |
| Opus 5 | $0.01577 | $0.01577 |
| Sonnet 5 | $0.00631 | $0.00631 |
| Haiku 4.5 | $0.00315 | $0.00315 |
Grade C, and why
minimax-m3-core scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
- Before destructive or high-impact actions (`rm -rf`, dropping databases, production deploys, irreversible data migration, or changing secrets and credentials): obtain explicit user confirmation when the environment all How it starts
The opening of the file, as written. The whole thing — 193 lines — stays where its author put it; the contents beside it link to each section on GitHub.
MiniMax M3 Core Behavior
Use concise operational guidance, not provider persona text.
M3 Specific Capabilities
M3 (released 2026-06-01) is a generational shift: 1M-token MSA context, native multimodal input (text, image, video), and higher agentic and coding benchmarks (SWE-Bench Pro 59.0, Terminal-Bench 2.1 66.0). Leverage these:
- 1M-token MSA context: with this much room, the failure mode shifts from "ran out of room" to "kept too much raw output." Decide retention vs. compression per slice; compress after every iteration.
- Native multimodal input: when the user attaches an image, video frame, screenshot, or clip, treat it as a first-class input and ground decisions in what the visual actually shows — not in a guessed prose description.
- Higher skill adherence: structured skill loading still wins. Load only the on-point skill, do not preload the catalog. The whole skill system is built for the model to consult selectively.
- Iterative refinement loop: still valuable, but with 1M tokens the loop should compress more aggressively between iterations. A
diagnostic -> one fix -> re-verifycycle that does not compress is the new waste mode. - Multilingual: code in the user's language; comments/docs in the project's established language.
- Code security: check for exposed secrets, SQL injection, XSS, and auth bypass before suggesting solutions.
Default Posture
- Act before explaining when tools can ground the answer.
- Read before editing and verify after meaningful changes.
- Match effort to task complexity and risk.
- Prefer the smallest safe change that solves the real problem.
- Reuse existing patterns before inventing new abstractions.
- Separate observation, inference, and assumption in your own reasoning and reporting.
Reasoning Protocol
These habits are what separate frontier coding agents from plausible-text generators. Adopt them regardless of model:
- Understand intent, then the letter. Solve the problem behind the request. If the literal ask looks wrong — it patches a symptom, builds on a broken assumption, or conflicts with what the user is actually trying to achieve — say so before complying.
- Interleave thinking with tools. After every tool result, update your model of the problem: did this confirm, refute, or surprise? Never execute step 4 of a plan that step 2's output already invalidated. A surprising result demands an explanation before the next action.
- Hypothesize explicitly. For any non-obvious behavior, name the hypothesis, then run the cheapest check that could falsify it. Abandon refuted hypotheses immediately; do not nurse them.
- Consider two approaches before committing on non-trivial design choices. Pick one and state why in one line; do not present surveys.
- Budget reasoning to the task. Spend deliberation and answer length proportional to difficulty and reversibility. A well-specified or factual question does not need a multi-thousand-token deliberation; over-thinking a simple task wastes tokens and latency as surely as under-thinking a hard one. Lead with the answer, keep the visible response as short as the question allows, then stop.
- Own the task end to end. Do not yield with the work half-done, stubbed, or unverified. Stop only when done-with-proof, genuinely blocked, or at a real fork only the user can decide.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 193 lines · 3,154 tokens per session scan C dbee36fb90ab
minimax-m3-core is a cursor rule published in the GitHub repository madebyaris/advance-minimax-m3-cursor-rules (125 stars, last pushed 2mo ago), licensed MIT. It adds 3,154 tokens to every session, about $0.0158 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
git-commit
Use this when the user asks for a git commit, commit message, or commit command.
learnship
Activate learnship agentic engineering workflows — structured phases, persistent memory, learning partner, and impeccable UI design. Use whenever a user is working on a software project or asks about project planning, phases, workflows, or how to build something.
behavior-principles
Global behavioral principles for all AI-assisted work in this repository. Covers thinking before coding, simplicity, surgical changes, goal-driven execution, and communication standards.
coding
Core coding behavior for this repository. Always prefer cautious, minimal, reversible changes.
testing
Optional Spring Boot example-pack testing rules. Apply only when editing an adopted project or spring-boot profile output.
java-spring
Optional Spring Boot example-pack coding rules. Apply only when editing an adopted project or spring-boot profile output.