Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/noveldig/mcp-xhs-publisherWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/noveldig/mcp-xhs-publisher/packaging-with-uv)<a href="https://agentmods.dev/rules/noveldig/mcp-xhs-publisher/packaging-with-uv"><img src="https://agentmods.dev/badge/rules/noveldig/mcp-xhs-publisher/packaging-with-uv/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/noveldig/mcp-xhs-publisher/packaging-with-uv"><img src="https://agentmods.dev/badge/rules/noveldig/mcp-xhs-publisher/packaging-with-uv.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01990 | $0.01990 |
| Opus 5.5 | $0.00796 | $0.00796 |
| Sonnet 5.5 | $0.00398 | $0.00398 |
| Haiku 4.5 | $0.00199 | $0.00199 |
Grade A, and why
packaging-with-uv scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.
使用 uv 打包与依赖管理指南 (Packaging and Dependency Management with uv Guide)
本指南为使用 uv 进行 Python 项目的依赖管理和打包（特别关注旨在发布到 PyPI 的项目，并以 coze-mcp-server 作为一个应用了许多这些原则的示例项目）提供规范和最佳实践。
uv 是一个非常快速的 Python 包安装器和解析器，旨在替代 pip 和 pip-tools 的部分功能。
参考：
coze-mcp-server项目中的[pyproject.toml](mdc:pyproject.toml)和[uv.lock](mdc:uv.lock)(作为实际项目配置的示例)。coze-mcp-server[README.md](mdc:README.md)中的安装说明 (展示了uv在实际使用中的一个场景)。
1. pyproject.toml 核心配置
[pyproject.toml](mdc:pyproject.toml) 是项目的核心配置文件，用于声明元数据、依赖项和构建系统。其在项目中的位置和基本作用可参考 项目结构指南 中关于配置文件的说明。
1.1. [project] 表
name: 项目的规范名称，即在 PyPI 上发布的名称 (e.g.,coze-mcp-server)。version: 项目版本号，遵循 PEP 440 (e.g.,"0.0.4")。动态版本控制也是一种选择，但需谨慎。description: 项目的简短描述。readme: 指定README文件 (e.g.,"README.md")。requires-python: 指定项目兼容的 Python 版本 (e.g.,">=3.8")。license: 指定许可证，例如{text = "MIT License"}或{file = "LICENSE"}。authors/maintainers: 列出作者和维护者信息。dependencies: 列出项目运行所必需的核心依赖项，带有版本说明符 (e.g.,fastapi >= 0.100.0, < 0.101.0)。- 尽量使用兼容版本 (
~=), 范围版本 (>=, <) 或精确版本 (==) 来平衡灵活性和稳定性。
- 尽量使用兼容版本 (
[project.optional-dependencies]: 定义可选的依赖组，例如dev,test。coze-mcp-server在pyproject.toml中定义了dev依赖。- 安装可选依赖：
uv pip install .[dev] - 针对特定功能（如 CLI 工具）的可选依赖: 许多包（例如
mcpPython SDK）会通过可选依赖项提供额外功能。例如，如果一个包提供了命令行工具，它可能会通过一个名为cli的 "extra" 来提供。安装时可以使用uv pip install package_name[cli]。- 参考
modelcontextprotocol/python-sdk的 README ([mdc:https:/github.com/modelcontextprotocol/python-sdk/blob/main/README.md])，其中提到了 "standalone MCP development tools" (例如mcp run,mcp dev)。这类工具通常就是通过类似mcp[cli]的方式安装的。开发者应查阅对应包的pyproject.toml或文档来确定可用的 "extras"。
- 参考
[project.urls]: 提供项目的相关链接，如Homepage,Repository,Bug Tracker。[project.scripts]: (如果适用) 定义通过命令行可执行的脚本。对于coze-mcp-server这种通过python -m运行的包，可能不直接在这里定义，而是通过包的__main__.py。coze-mcp-server的README.md中配置 Claude.app/Zed 时，使用了python -m coze_mcp_server或uvx coze-mcp-server。
classifiers: 提供 PyPI 分类器，帮助用户发现项目。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 85 lines · 1,990 tokens per session scan A c60a370b0ccd
packaging-with-uv is a cursor rule published in the GitHub repository noveldig/mcp-xhs-publisher (1 stars, last pushed 1y ago), licensed MIT. It adds 1,990 tokens to every session, about $0.0080 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other cursor rules, from other repositories
python_tests
We use the unit tests to cover internal behavior that can work without the web / backend counterpart. We aim for 95%+ unit test coverage of our Python code in lib/streamlit.
python-llm-ml-workflow-cursorrules-prompt-file
Cursor rules for Python LLM & ML development with workflow integration.
python
Python best practices and patterns for modern software development with Flask and SQLite.
python-containerization-cursorrules-prompt-file
Cursor rules for Python development with containerization integration.
python-django-general
General coding guidance for Python and Django projects, including naming, formatting, modular apps, built-in tools, and maintainable structure. Python is a programming language, and Django is a Python web framework.
python-general-coding-standards
A set of general standards for Python projects, including type hints, input checking, code style, security, web requests, background work, and tests. It also covers FastAPI-specific tasks such as CORS and authentication.