quickfile-mcp: Cursor rule for Windsurf

.windsurfrules

windsurfrules is a cursor rule for Windsurf from marcusquinn/quickfile-mcp. It costs 11 tokens per session, scanned A, a copy of cursorrules, MIT.

A project rule that tells the coding agent to read AGENTS.md for project context and instructions. AGENTS.md is a file where a project can store guidance for contributors or agents.

In plain words
What is it for?
Use it to make an agent consult AGENTS.md before working on a project.
Why use it?
It reduces the chance that the agent works without the project's required context or rules.

Cursor rule for Windsurf

Written for Windsurf: a Windsurf rule. Also seen: mentions AGENTS.md.

This is marcusquinn/quickfile-mcp's own configuration. It tells Windsurf how to work on quickfile-mcp itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything quickfile-mcp configures →

Reuse

Borrowing it

Nothing to install: this file belongs to marcusquinn/quickfile-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/marcusquinn/quickfile-mcp/main/.windsurfrules
Clone the repo
git clone --depth 1 https://github.com/marcusquinn/quickfile-mcp

Made for: Windsurf.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for windsurfrules

README.md
[![agentmods](https://agentmods.dev/badge/rules/marcusquinn/quickfile-mcp/windsurfrules/github.svg)](https://agentmods.dev/rules/marcusquinn/quickfile-mcp/windsurfrules)
Your own site
<a href="https://agentmods.dev/rules/marcusquinn/quickfile-mcp/windsurfrules"><img src="https://agentmods.dev/badge/rules/marcusquinn/quickfile-mcp/windsurfrules/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for windsurfrules

Your own site · 80×15
<a href="https://agentmods.dev/rules/marcusquinn/quickfile-mcp/windsurfrules"><img src="https://agentmods.dev/badge/rules/marcusquinn/quickfile-mcp/windsurfrules.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 11 This file is loaded in full into every session.
When invoked 11 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00011 $0.00011
Opus 5.5 $0.00004 $0.00004
Sonnet 5.5 $0.00002 $0.00002
Haiku 4.5 $0.00001 $0.00001

Measured 1mo ago against content hash a5eb5a4e5a52, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

windsurfrules scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to cursorrules — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.windsurfrules · 2 lines

What it actually says

Read AGENTS.md for all project context and instructions.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 2 lines · 11 tokens per session scan A a5eb5a4e5a52

Subscribe to this mod's changes

windsurfrules is a cursor rule published in the GitHub repository marcusquinn/quickfile-mcp (4 stars, last pushed yesterday), licensed MIT. It adds 11 tokens to every session, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 100% identical to cursorrules, differing in 0 lines, and is treated as a copy.

Related

windsurfrules compared with cursor rules from other repositories

windsurfrules next to 6 cursor rules from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
windsurfrulesmarcusquinn/quickfile-mcpCursor rule4yesterdayMITA11Windsurf
ponytailDietrichGebert/ponytailCursor rule185k8d agoMITA604Cursor
angular-20angular/angularCursor rule101kyesterdayMITA0Cursor
dev-standardapache/supersetCursor rule75ktodayApache-2.0A1,147Cursor
prefer-assertions-over-defensive-checksprisma/ormCursor rule48kyesterdayApache-2.0A0Cursor
prefer-direct-imports-over-module-mocksprisma/ormCursor rule48kyesterdayApache-2.0A0Cursor
shared-plane-packagesprisma/ormCursor rule48kyesterdayApache-2.0A0Cursor