Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/xiaoleiy/podpull/cursor_rulegit clone --depth 1 https://github.com/xiaoleiy/podpullWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00022 | $0.00533 |
| Opus 5 | $0.00011 | $0.00267 |
| Sonnet 5 | $0.00004 | $0.00107 |
| Haiku 4.5 | $0.00002 | $0.00053 |
Grade A, and why
cursor_rule scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Downloading podcast audio with podpull
When the user wants to download a podcast episode's audio file, use the installed
podpull CLI (https://github.com/xiaoleiy/podpull). Install if missing:
brew install xiaoleiy/tap/podpull or pipx install git+https://github.com/xiaoleiy/podpull.
Commands:
podpull search "<keywords>"— find a show (Apple ID, episode count).podpull list <src> [--match RE] [--all]— list episodes; index 0 = newest.podpull get <src> --match RE | --latest N | --index 0,2— download (alias:pull).podpull get <episode-url>— a pasted Apple?i=or xiaoyuzhou link.podpull get <src> ... -q/--quiet— suppress spinner/progress bar.podpull --json <cmd> …— one JSON document on stdout (flag before the command).podpull serve— local UI (search / trending / browser download).- Hosted UI: https://podpull.xiaolei.work/app (metadata API only; audio via publisher CDN).
<src>= Apple show URL · bare Apple ID · RSS feed URL · Apple episode URL · xiaoyuzhou link.
Rules:
- Always pass a selector and
--no-input; a barepodpull get <show>opens an interactive picker that can't be driven from the agent. - Also pass
-q/--quiet— the spinner/progress bar are pointless outside a live terminal; stdout output (the saved file path) is unaffected. - Prefer
podpull --json …when you need structured data (search/info/list/get). - File path prints to stdout, progress to stderr. Default output
~/Downloads/Podcasts(--outto change). - Multiple episodes → per-show folder; filenames are normalized to be cloud-storage-safe (CJK kept).
- Optional: if PODCASTINDEX_API_KEY/PODCASTINDEX_API_SECRET are set,
searchalso queries Podcast Index and feed resolution gains a fallback; ximalaya.com/album/ links work as a source.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 32 lines · 22 tokens per session scan A f52029d3682c
cursor_rule is a cursor rule published in the GitHub repository xiaoleiy/podpull (141 stars, last pushed 1mo ago), licensed MIT. It adds 22 tokens to every session and 533 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
android-viewmodel
Android ViewModel conventions — StateFlow, repository abstraction, coroutines, no LiveData.
smol-cli
Setup once per project: install with npm i -g @electrooo69/sped-cli@latest --force, then run sped setup --all in the project root if .sped-cli/ is missing. Never delete .sped-cli/. Only follow the instruction file for your current agent. Do not delete or modify other agents' instruction files unless explicitly asked.…
livkiet-plugins-playai
Agent Framework plugin for voice synthesis with PlayAI API.
angular-20
This rule provides comprehensive best practices and coding standards for Angular development, focusing on modern TypeScript, standalone components, signals, and performance optimizations.
dev-standard
Apache Superset development standards and guidelines for Cursor IDE.
typescript
Changes to these high-fan-out internals can affect every message, delta, element, or rerun. Keep work in them minimal, and benchmark changes with representative stress-test apps.