underhood Cursor ruleA

underhood from harsh-aghara/underhood is a Cursor rule: instructions the Cursor agent follows in that repo.

Install it, pinned
mdr add harsh-aghara/underhood/.cursor/rules/underhood.mdc@git:20261031.571703e

Pins git:20261031.571703e in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 14 of 14 checks passed
Kind
Cursor rule
Repository
harsh-aghara/underhood
Path
.cursor/rules/underhood.mdc
Versions recorded
2
Latest version
git:20261031.571703e, committed Oct 31, 2026
First version recorded
Oct 30, 2026
Size
12,401 bytes
Repository stars
8
License
MIT

Explains how code really works, with file:line evidence (triggered by /underhood or code trace requests).

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# /underhood: how the code really works

The reader wants the mechanism, not a tour. A good analysis lets them predict what
the code does in a situation nobody documented. That takes concrete data
structures, real call paths, and honest limits on what was and wasn't read.
Report what the code does, including when it does the right thing. A clean result
is a valid result.

Work as a single turn. Don't stop to ask questions. If something is ambiguous, pick
the most reasonable reading, state it in one line at the top, and continue.

---

## Resolve the target

The target is whatever the user pointed at: a path, repo, function, PR number or
URL, branch, or commit range.

- **No target given:** use the working directory and say so as an assumption.
- **PR, commit, branch, or "my changes":** this is Delta mode. Get the diff with `gh pr diff <n>` when `gh` is available, otherwise `git diff <base>...<head>` or `git show <sha>`. For "my changes" with no base, compare against the default branch, falling back to uncommitted changes. Read the PR description or commit messages too; they state the intent you will check the code against.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add harsh-aghara/underhood/.cursor/rules/underhood.mdc@sha256:371bc81c55245323

The line at the top of this page pins the label git:20261031.571703e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_fonk4acd2ebba4yc.svg)](https://markdownregistry.com/a/art_fonk4acd2ebba4yc)

1 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 2 versions of this file, between Oct 30, 2026 and Oct 31, 2026, more than one a day.

versioncommittedcommitsizeaudit
git:20261031.571703e latest2026-10-31 571703e 12,401 BA view · diff
git:20261030.4a1a1972026-10-30 4a1a197 6,203 BA view

Audit of the latest version

A  14 of 14 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Size between 200 bytes and 200 KB (12401 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

harsh-aghara/underhood · 8 stars · license MIT · pushed 2026-11-01 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_fonk4acd2ebba4yc
GET https://markdownregistry.com/api/v1/resolve?ref=harsh-aghara/underhood/.cursor/rules/underhood.mdc
GET https://markdownregistry.com/api/v1/blob/371bc81c55245323b48570c70975d186cd33a7dc5615063db984f532009290f9

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: Cursor rules vs AGENTS.md · which agent file does what.

More from harsh-aghara/underhood

underhood SKILL.md skill
harsh-aghara/underhood · .agents/skills/underhood/SKILL.md · Explains how code really works, with file:line evidence: architecture, the end-to-end execution path, where state…
git:20261031.571703e · audit A · 8 stars
AGENTS.md AGENTS.md file
harsh-aghara/underhood · AGENTS.md
git:20261031.571703e · audit A · 8 stars
underhood SKILL.md skill
harsh-aghara/underhood · skills/underhood/SKILL.md · Explains how code really works, with file:line evidence: architecture, the end-to-end execution path, where state…
git:20261101.85c75ae · audit A · 8 stars

Every file in harsh-aghara/underhood

Other files named underhood

underhood SKILL.md skill
harsh-aghara/underhood · skills/underhood/SKILL.md · Explains how code really works, with file:line evidence: architecture, the end-to-end execution path, where state…
git:20261101.85c75ae · audit A · 8 stars
underhood SKILL.md skill
harsh-aghara/underhood · .agents/skills/underhood/SKILL.md · Explains how code really works, with file:line evidence: architecture, the end-to-end execution path, where state…
git:20261031.571703e · audit A · 8 stars

Browse by kind, by grade A, or by owner.