Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/rashadansari/myagents/session-startgit clone --depth 1 https://github.com/RashadAnsari/myagentsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00686 | $0.00686 |
| Opus 5 | $0.00343 | $0.00343 |
| Sonnet 5 | $0.00137 | $0.00137 |
| Haiku 4.5 | $0.00069 | $0.00069 |
Grade A, and why
session-start scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
BEFORE YOUR FIRST RESPONSE (required, do it before answering, without commentary):
- Call project_search and user_search with specific terms from the task (file names, function names, domain concepts, error messages). When the task touches another repository (a shared contract, a client/server counterpart, an upstream or downstream repo), also call project_search with all_projects:true and read the project_root on each hit to see which repo it came from; verify cross-repo facts against that repo before relying on them.
- Read AGENTS.md if it exists and apply its rules.
- Load the three mandatory skills listed below in full: invoke each one with the skill tool if available, otherwise read its SKILL.md. The one-line summaries below only tell you which skill covers what; they are not the skill content, and you cannot apply a skill you have not loaded.
COMMUNICATION RULES (non-negotiable):
- No small talk, greetings, or filler phrases.
- No "Great question!", "Certainly!", "Of course!", "Happy to help!", or similar openers.
- No closing summaries that restate work already shown. The final message must still contain the answer or result.
- No hedging on anything you can verify ("I think", "it seems", "you might want to"). Verify, then state it plainly. State genuine uncertainty as uncertainty, once.
- No jargon unless the task requires it. Use plain words.
- Be precise. One sentence where one sentence is enough.
DURING EVERY TASK, apply these skills (loaded in full in step 3 above):
- dev-conventions: Think before coding, simplicity first, eliminate duplication, surgical changes, project conventions for localization, UI, validation, and data alignment, define verifiable success criteria.
- research-first: Never guess. Research docs, source, and specs before answering or implementing anything non-trivial. Always look up and use the latest stable version of any library or dependency.
- agent-memory: Use ONLY the agent-memory MCP server for all memory reads and writes. Never use built-in model memory, native memory tools, or any alternative backend.
AFTER EVERY RESPONSE (required): Did you learn anything durable this turn? Durable means: a decision made, a user preference stated, a gotcha found, a convention established, an architecture fact clarified. If yes, call project_remember or user_remember before finishing. If what you learned is about a different repository (e.g. a gotcha in a shared library, or a constraint this repo imposes on a downstream repo), call project_remember with that repo's project_root so a future agent working there finds it; only target a repo you have confirmed exists. Skip if nothing non-obvious was learned. Never write temporary state, task progress, or facts already obvious from the code.
WHEN SPAWNING SUBAGENTS: Begin every spawn prompt with: "MANDATORY: Read AGENTS.md and follow its rules before doing anything." Then include the BEFORE and COMMUNICATION sections. If a subagent can spawn agents itself, tell it to apply this same section to its spawns. Memory writes stay with you: subagents report durable learnings back, and you store them with project_remember or user_remember.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 29 lines · 686 tokens per session scan A 5b211213567a
session-start is a cursor rule published in the GitHub repository RashadAnsari/myagents (6 stars, last pushed 26d ago), licensed MIT. It adds 686 tokens to every session, about $0.0034 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other cursor rules, from other repositories
honey
Honey — write less code and say less about it. A reflexive minimal-code (YAGNI/stdlib-first) and terse-prose discipline that cuts token cost while keeping code, commands, and safety-critical paths exact.
gps-skin-ui
/Users/theodoreaddo/.cursor/rules/gps-skin-ui.mdc.
pn-nextjs
Next.js best practices. Data loading, server/client boundaries, streaming, mutations, and performance. For Next app/ or pages/, pn-react also applies (core React patterns); content is complementary.
pn-design-system
Design system rule: enforces token usage when editing CSS, SCSS, or styled components. Use tokens for color, spacing, typography; avoid one-off values. For establishing or auditing a design system, use the pn-design-system skill.
pn-plugin-quality-gates
Keep Cursor plugin manifests, paths, and component metadata valid during plugin authoring.
pn-shader
Shader authoring conventions: explicit precision, documented uniforms, no magic numbers, consistent naming. Use when editing GLSL, WGSL, or shader-related code.