Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/sagar25-code-it/ps3d-cad-studio/projectgit clone --depth 1 https://github.com/sagar25-Code-it/ps3d-cad-studioWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00014 | $0.01198 |
| Opus 5 | $0.00007 | $0.00599 |
| Sonnet 5 | $0.00003 | $0.00240 |
| Haiku 4.5 | $0.00001 | $0.00120 |
Grade A, and why
project scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 135 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PS3D project configuration
project:
name: ps3d-cad-studio-original
displayName: PS3D CAD Studio
type: browser-app-plus-local-and-remote-mcp
repositories:
primary: https://github.com/sagar25-Code-it/ps3d-cad-studio
modifiable:
- https://github.com/sagar25-Code-it/ps3d-cad-studio
readOnly: []
involved:
- https://github.com/sagar25-Code-it/ps3d-cad-studio
localWorkspace: true
remoteStatus: release-candidate-source-present; live GitHub/Vercel/Supabase resources pending browser publication
technology:
languages:
- TypeScript
- JavaScript
- CSS
- HTML
- JSON
- Markdown
languageVersions:
node: ">=24.0.0"
typescript: "7.0.2"
ecmascriptTarget: ES2023
frameworks:
- React 19.2.8
- React DOM 19.2.8
- Three.js 0.185.1
- Vite 7.3.6
- Web Workers
- IndexedDB
- Model Context Protocol SDK 2.0.0 (local Node stdio only)
- Zod 4.4.3 (local MCP schemas only)
- Vercel Web-standard Node.js Functions
- Supabase Auth and Postgres REST/RPC
buildTool: pnpm 11.9.0 workspace
testCommands:
fullSuite: pnpm test
singleClass: pnpm test
typecheck: pnpm typecheck
productionBuild: pnpm build
packageRoots:
- apps/mcp-server/src
- apps/studio-web/src
- api
- packages/commands/src
- packages/evidence/src
- packages/import-export/src
- packages/model-schema/src
- packages/model-worker/src
- packages/persistence/src
- packages/sketch-kernel/src
- packages/solid-bracket-kernel/src
- packages/solid-kernel-api/src
- packages/solid-manifold-adapter/src
- packages/viewport-three/src
- packages/workbench-core/src
- packages/workbench-drawing/src
- packages/workbench-geometry/src
- packages/workbench-mcp/src
- packages/workbench-sketch/src
- packages/worker-protocol/src
- scripts
- supabase/migrations
- tests
routeConfigPatterns:
- apps/studio-web/index.html
bugbot:
enabled: false
repoUrl: https://github.com/sagar25-Code-it/ps3d-cad-studio
triggerOnDraftPr: false
botLogins: []
jira:
enabled: false
baseUrl: TBD
projectKey: TBD
projectStyle: none
branching:
defaultBranch: main
mergeStrategy: pull-request
commitConvention: conventional-with-accurate-signoff
dependencies:
internal:
- project-owned workspace packages under packages/*
external:
- react 19.2.8
- react-dom 19.2.8
- three 0.185.1
- @modelcontextprotocol/server 2.0.0 (local Node stdio only)
- zod 4.4.3 (local Node stdio only)
- TypeScript 7.0.2
- Vite 7.3.6
- manifold-3d 3.5.1 (development-only candidate; forbidden from production graph)
agentVerification:
runLocally: browser-compatible checks only on the protected workstation
ciCommands:
compile: pnpm typecheck
unitTests: pnpm test
build: pnpm build
skipLocal: []
deferTo:
- GitHub Actions clean runner for frozen install, typecheck, full tests, production build, CodeQL, and dependency review
constraints:
- Work only in ps3d-cad-studio-original; do not inspect or reuse the older derived project
- Implement from neutral PS3D requirements and approved primary technical sources only
- Do not copy third-party CAD code, UI, assets, wording, samples, or distinctive workflows
- Keep the semantic document authoritative and derived geometry disposable
- Preserve worker isolation, bounded input validation, atomic persistence, and explicit failure diagnostics
- Keep manifold-3d, WASM, and dynamic evaluation out of the production browser graph
- Keep the Node-only MCP SDK, protocol core, Zod, and apps/mcp-server out of the production browser graph; remote functions may call only the project-owned pure handler layer
- Add no dependency or asset without provenance, license, lockfile, notice, security, and build-boundary review
- Do not commit secrets, tokens, .env files, private keys, personal data, build output, or unexplained binaries
- Do not claim exact B-rep, NURBS, persistent face naming, universal robustness, or production readiness without evidence
- Publish, commit, and deploy only through the explicitly authorized Chrome Incognito release workflow; stop for any paid plan, unexpected privilege, or unrecoverable action
- Only .cursor/project-context files may be project-specific under .cursor
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 135 lines · 14 tokens per session scan A 2e089f3a5772
project is a cursor rule published in the GitHub repository sagar25-Code-it/ps3d-cad-studio (0 stars, last pushed 2d ago), licensed MIT. It adds 14 tokens to every session and 1,198 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other cursor rules, from other repositories
angular-20
This rule provides comprehensive best practices and coding standards for Angular development, focusing on modern TypeScript, standalone components, signals, and performance optimizations.
dev-standard
Apache Superset development standards and guidelines for Cursor IDE.
coolify-ai-docs
Master reference to all Coolify AI documentation in .ai/ directory.
typescript
Changes to these high-fan-out internals can affect every message, delta, element, or rerun. Keep work in them minimal, and benchmark changes with representative stress-test apps.
python_lib
Tips and guidelines specific to the development of the Streamlit Python library, not applicable to scripts and e2e tests.
specs
This directory contains product and tech specs for Streamlit features.