Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/mikiships/agentmd/cursorrulesgit clone --depth 1 https://github.com/mikiships/agentmdWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00552 | $0.00552 |
| Opus 5 | $0.00276 | $0.00276 |
| Sonnet 5 | $0.00110 | $0.00110 |
| Haiku 4.5 | $0.00055 | $0.00055 |
Grade A, and why
cursorrules scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 64 lines — stays where its author put it; the contents beside it link to each section on GitHub.
.cursorrules
Cursor IDE rules. These rules are applied to every AI interaction in this project.
Always
- Read the relevant source files before making changes.
- Make minimal, targeted edits — avoid reformatting unrelated code.
- Respect the existing code style (indentation, naming, import order).
- Run
python3 -m pytest tests/ -xafter every non-trivial change. - Run
ruff check . && ruff format --check .before finalizing changes. - Add type annotations to all new public functions.
- Use
pathlib.Pathinstead ofos.pathfor file operations.
Never
- Never commit API keys, tokens, or credentials.
- Never delete tests to make the suite pass.
- Never use
TODOcomments without a linked issue or explanation. - Never make changes outside the scope of the current task without flagging them.
- Never use
except:without specifying the exception type. - Never use
eval()orexec()on untrusted input.
Project Overview
Primary languages: Python Package managers: pip CI: GitHub Actions
Build, Test, and Lint Commands
Install dependencies:
pip install -e '.[dev]'
Run tests:
python3 -m pytest tests/ -x
Lint / format:
ruff check . && ruff format --check .
Directory Structure
Top-level directories: .github, agentmd, tests
Test roots: tests
Most-changed directories: agentmd, tests, README.md, pyproject.toml, progress-log.md
File Patterns
Test files: tests/**
Python source: **/*.py
Python tests: **/test_*.py, **/*_test.py
Conventions Inferred from Codebase
Commit prefix style: feat, fix, chore, docs, feat(d3) (follow this pattern)
Common file extensions: .pyc, .py, .md, .toml, .yml
- Python: use type hints on all public functions
- Python: snake_case for functions/variables, PascalCase for classes
- Tests: files named
test_*.py, functions namedtest_*
Context Preferences
When writing or reviewing code, prefer to include in context:
tests/(primary code locations)- The file being edited and its direct imports.
- Relevant test files alongside source files.
- Configuration files when modifying build or tooling behavior.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 64 lines · 552 tokens per session scan A d6dd9c33ccc0
cursorrules is a cursor rule published in the GitHub repository mikiships/agentmd (12 stars, last pushed 5mo ago), licensed MIT. It adds 552 tokens to every session, about $0.0028 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
branch-naming-style
Generating properly formatted git branch name.
commit-message-style
Generating properly formatted git commit message.
cursorrules
ALWAYS start your session by reading AGENTS.md and .memory/wiki/hot.md to get project context before suggesting code or answering questions.
api-property-optionality-hygiene
Fix ApiProperty/ApiPropertyOptional optionality mismatches in DTO files; use for scheduled batch fixes or DTO edits.
java-springboot-jpa-cursorrules-prompt-file
description: "Cursor rules for Java development with Springboot and JPA integration." globs: / alwaysApply: false.
secure-dev-rust
These rules apply to all Rust code in the repository and aim to prevent common security risks through disciplined use of memory safety, input validation, error handling, and safe APIs.