Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/sandraschi/virtualization-mcp/implementation-honestygit clone --depth 1 https://github.com/sandraschi/virtualization-mcpWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00114 | $0.00114 |
| Opus 5 | $0.00057 | $0.00057 |
| Sonnet 5 | $0.00023 | $0.00023 |
| Haiku 4.5 | $0.00011 | $0.00011 |
Grade A, and why
implementation-honesty scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Implementation Honesty Rule
- Prototype placeholders are temporary and must be clearly marked.
- Runtime code must not return simulated success for unimplemented behavior.
- Missing integrations/models/providers must return explicit
not_implementederrors. - Security/runtime findings must never be synthetic in production paths.
- Webapp must show Under construction for unavailable functionality.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 14 lines · 114 tokens per session scan A a51b3c67bc9c
implementation-honesty is a cursor rule published in the GitHub repository sandraschi/virtualization-mcp (14 stars, last pushed 3d ago), licensed MIT. It adds 114 tokens to every session, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
rules.general
Cursor rule "rules.general" from lingyuanli/MultiGen, covering 项目开发规范, 技术栈, 代码规范, typescript and react/next.js.
frontend-theme-guidelines
Cursor rule "frontend-theme-guidelines" from KroMiose/nekro-agent, covering 前端主题系统开发指南, 主题系统架构, 核心文件结构, 基本原则 and 主题使用指南.
plugin-rules
NekroAgent 插件开发规范，包含插件模板、API 用法、SandboxMethodType 选择、提示词注入、错误处理等完整指引。在开发、修改或审查 NekroAgent 插件代码时应用此规则。.
cursorrules
BEFORE making any changes or starting work, ALWAYS.
global
Cursor rule "global" from KroMiose/nekro-agent, covering 项目背景（简要）, 开发规范, 文档, 开发指南 and 功能/页面开发完整流程.
cursorrules
You are working with a World Labs MCP server that generates and manages generative 3D worlds, sparks, painting portals, and a world library.