conventions

conventions is a cursor rule for Cursor from techtalk/ai-readiness-assessment. It costs 848 tokens per session, scanned A, original, Apache-2.0.

A project-rules document describing the repository's writing, testing, build, and delivery conventions.

In plain words
What is it for?
Use it when working on the plugin or its documentation, especially when you need to follow its test and continuous-integration rules.
Why use it?
It gives coding agents one shared reference for how this project should be changed and checked.

Cursor rule for Cursor

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add rules/techtalk/ai-readiness-assessment/conventions
Clone the repo
git clone --depth 1 https://github.com/techtalk/ai-readiness-assessment

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for conventions

README.md
[![agentmods](https://agentmods.dev/badge/rules/techtalk/ai-readiness-assessment/conventions.svg)](https://agentmods.dev/rules/techtalk/ai-readiness-assessment/conventions)
Your own site
<a href="https://agentmods.dev/rules/techtalk/ai-readiness-assessment/conventions"><img src="https://agentmods.dev/badge/rules/techtalk/ai-readiness-assessment/conventions.svg" alt="Measured on agentmods" height="20"></a>
Per session 848 This file is loaded in full into every session.
When invoked 848 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00848 $0.00848
Opus 5 $0.00424 $0.00424
Sonnet 5 $0.00170 $0.00170
Haiku 4.5 $0.00085 $0.00085

Measured 3d ago against content hash 82d5afd5075d, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

conventions scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/rules/conventions.mdc · 65 lines

How it starts

The opening of the file, as written. The whole thing — 65 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Project Conventions

These conventions are synced from HARNESS.md. Do not edit this file directly — run /convention-sync to regenerate.

Stack

  • Primary languages: Markdown (content), JSON (plugin manifest). No programming language is compiled or executed; the plugin's entire product is the prose inside the command and skill files.
  • Build system: None for the plugin artifact — a plugin distribution layout (.claude-plugin/plugin.json + commands/ + skills/) consumed directly by Claude Code, Copilot, Cursor, and Windsurf, with no compilation, bundling, or packaging. The one build step is the docs site (mkdocs build --strict, see CI/CD).
  • Test framework: TDAB (Test-Driven Agentic Behaviours). The A-tier (structural) assertions are automated in tests/run.py (stdlib only) and CI-enforced on every PR by .github/workflows/agentic-behaviours.yml. B-tier (behavioural) and C-tier (semantic) assertions in each fixture's expected.md are run manually — see tests/README.md.
  • CI/CD: GitHub Actions. On every PR to a branch-protected main, four required checks run — A-tier structural assertions (the TDAB suite, agentic-behaviours.yml), Changelog gate (changelog-gate.yml), Spec-first gate (spec-first-gate.yml) and Onboarding gate (onboarding-gate.yml). On a version bump, release.yml publishes a GitHub Release from CHANGELOG.md; on docs changes, pages.yml builds and deploys the MkDocs site.
  • Container strategy: N/A. No runtime, no container.

Conventions

  • Dual-surface sync: The framework content embedded in commands/ai-readiness-assess.md must be identical to the same content in skills/ai-readiness-assessment/SKILL.md. Editing one without updating the other is forbidden.
  • Self-contained: Neither commands/ai-readiness-assess.md nor skills/ai-readiness-assessment/SKILL.md may reference, invoke, or depend on any other plugin, skill, agent, MCP server, or external service. The dependencies field in .claude-plugin/plugin.json must remain absent or empty.
  • Single CTA: The assessment's recommendation output must propose exactly one specific TechTalk engagement. Multi-option menus, "consider one of…", or "you might want…" lists are forbidden.
  • Frontmatter shape: Every file in commands/ and every SKILL.md under skills/ must carry YAML frontmatter with name and description. For commands, name equals the filename without .md; for skills, name equals the parent directory name.
  • Plain-text output: The optional rendered output (HTML, printable PDF, or other) must use print-friendly typography. No emojis appear in any rendering template the skill emits.
  • Spec-first for substantive changes: Substantive, behaviour-changing work (the assessment instrument, the model or scoring, a new workflow) is captured as a spec under specs/ — at minimum a one-paragraph intent — written or updated with the change and referenced in the PR. Docs, chore, surface-sync, dependency, and pure-fix PRs are exempt. Each spec carries a "Risks / what could go wrong" section (a lightweight adversarial review). Enforced — see the Spec-first constraint.

Read the full file on GitHub · 65 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 65 lines · 848 tokens per session scan A 82d5afd5075d

Subscribe to this mod's changes

conventions is a cursor rule published in the GitHub repository techtalk/ai-readiness-assessment (9 stars, last pushed 16d ago), licensed Apache-2.0. It adds 848 tokens to every session, about $0.0042 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.