Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/xuliang2024/cutcli-cookbooknpx agentmods add rules/xuliang2024/cutcli-cookbook/deployWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/xuliang2024/cutcli-cookbook/deploy)<a href="https://agentmods.dev/rules/xuliang2024/cutcli-cookbook/deploy"><img src="https://agentmods.dev/badge/rules/xuliang2024/cutcli-cookbook/deploy/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/xuliang2024/cutcli-cookbook/deploy"><img src="https://agentmods.dev/badge/rules/xuliang2024/cutcli-cookbook/deploy.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01543 |
| Opus 5.5 | $0.00000 | $0.00617 |
| Sonnet 5.5 | $0.00000 | $0.00309 |
| Haiku 4.5 | $0.00000 | $0.00154 |
Grade A, and why
deploy scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
→ smoke test (curl 5 个关键路径) How it starts
The opening of the file, as written. The whole thing — 176 lines — stays where its author put it; the contents beside it link to each section on GitHub.
部署架构与流程
资源拓扑
flowchart LR
user[Browser] -->|"https://docs.cutcli.com/*"| dns[Cloudflare DNS]
dns -->|"proxied A 192.0.2.1"| route[Worker Route]
route -->|"docs.cutcli.com/*"| worker[Worker docs-cutcli]
worker -->|"R2 binding DOCS"| r2[(R2 cutcli-docs)]
资源清单
| 资源 | 标识 |
|---|---|
| R2 bucket | cutcli-docs（专放 VitePress build 产物） |
| Worker | docs-cutcli（src 在本仓 worker/） |
| Worker route | docs.cutcli.com/* + docs.cutcli.com |
| DNS 记录 | docs.cutcli.com A 192.0.2.1 (proxied) |
| Cloudflare account | [email protected] (id 11c47779f0d4c3d0e69ccc6c484dc589) |
| Zone | cutcli.com (zone id 064059cb21d36956c11381995b964467) |
路径解析（worker 行为）
worker/src/index.ts 收到请求时按下面顺序解析 R2 key：
/→index.html/foo/→foo/index.html/foo/bar.html→foo/bar.html（直接命中）/foo/bar（无扩展名）→ 依次试foo/bar.html→foo/bar/index.html- 都不命中 → 返回 R2 中的
404.html，HTTP 404
缓存策略
| 路径 | Cache-Control |
|---|---|
assets/<hash>.{js,css} |
public, max-age=31536000, immutable (VitePress 文件名带 hash，安全) |
其他（含 .html） |
public, max-age=3600, must-revalidate |
本地部署
# 一键
npm run deploy
# 等价于
npm run docs:build # vitepress build → docs/.vitepress/dist
npm run r2:upload # 增量上传，仅 etag 变化的文件 (~10s)
npm run worker:deploy # 仅 worker 改动时需要
r2:upload 用并发 6 路调用 worker/node_modules/.bin/wrangler，跳过 md5 相同的文件。设置 UPLOAD_CONCURRENCY=8 可提速。
CI 部署（推荐）
合并到 main 后，.github/workflows/deploy-docs.yml 自动跑：
checkout
→ setup-node v22
→ npm ci (root + worker)
→ npm run docs:build
→ node scripts/upload-r2.mjs # 增量上传
→ cloudflare/wrangler-action@v3 deploy worker (仅 worker 有改动时)
→ smoke test (curl 5 个关键路径)
触发条件（paths）：
docs/**worker/**scripts/upload-r2.mjspackage.json/package-lock.json.github/workflows/deploy-docs.yml
也可手动 gh workflow run deploy-docs.yml。
CF API Token 权限
GitHub Secrets 必须配：
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 176 lines · 0 tokens per session scan A b5e0eabac1bb
deploy is a cursor rule published in the GitHub repository xuliang2024/cutcli-cookbook (199 stars, last pushed 4mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,543 tokens. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
atmos-rules
This is a Golang CLI project using Cobra for command structure and Viper for configuration management. The project maintains high code quality standards through golangci-lint and aims for maximum test coverage. The repository also includes the website source code for https://atmos.tools.
hatch3r-operability
Operability patterns in user code — liveness / readiness / startup probes, graceful shutdown, feature flags, runbook URL annotations, health endpoints.
hatch3r-scalability
CQ6 Scalability Quality measurement rule — stateless-handler ratio, back-pressure pattern adoption, idempotency-key adoption on POST/PUT/PATCH, queue offloading for >1s ops, pool sizing per concurrency profile.
hatch3r-progressive-delivery
Progressive delivery — canary, blue-green, feature-flag rollout with auto-rollback on SLO burn; staged rollout to prevent CrowdStrike-class incidents.
hatch3r-observability-metrics
Metrics, SLO/SLI definitions, alerting, and dashboard conventions for the project.
cloudflare-tunnel-routes
Persistent HTTPS URL for local Gradio/Streamlit/FastAPI/webhook services without deploying. Use when the user wants a stable permanent URL on a domain they own (not a throwaway URL, not managed hosting).