Agent skills for Cursor

Runs a two-pass vulnerability scan on a snippet, file, or diff — a static pattern pass across fixed categories (injection, secrets, auth…

Hardens a feature against attack before or while it's built — threat-model trust boundaries with STRIDE, apply the Always/Ask-First/Never…

Reviews code for security vulnerabilities across Go, TypeScript, PHP, and infrastructure config.

Audits an agent harness's own configuration — CLAUDE.md, .claude/settings.json, MCP server configs, hooks, and agent definitions — for…

Optimize for search engine visibility and ranking.

Writes a structured, human-reviewed specification before any code, deriving implementation from that written contract rather than from a…

Use when deciding whether to manually compact conversation context now versus later — at a phase boundary (research done, plan written…

Drives development with tests written before implementation code, in Go, TypeScript, PHP, or any language.

Generates comprehensive unit, table-driven, and concurrency tests for a given function or module — happy paths, error paths, boundary…

Guides synthesizing raw qualitative user research into defensible themes using affinity mapping (the KJ method) and conducting…

Meta-skill for how this agent discovers and decides which of its own available skills to invoke for the current task.

Comprehensive web quality audit covering performance, accessibility, SEO, and best practices.

Use when configuring shfmt for shell script formatting including .shfmt.toml setup, EditorConfig integration, and project-specific settings.

Comprehensive database design tool creating complete schemas with tables, fields, indexes, and ER diagrams.

Load top-performing Shinka programs into agent context using `shinka.utils.load_programs_to_df`, and emit a compact Markdown bundle for…

Complete shipping and logistics intelligence system for ecommerce sellers, importers, exporters, and anyone moving physical goods.

Build the Agent Native desktop app locally, kill the running copy, install the fresh DMG to /Applications, and launch it.

Run the full SeldonFrame feature loop — brainstorm → spec → plan → subagent build → verify-build → merge → memory — stopping only at the…

Package and finalize completed work for delivery — use when a feature is done and ready to ship

Automated release pipeline: merges main, runs tests, pre-landing review, version bump, changelog, bisectable commits, and PR creation.

Use when delivering or releasing a completed Shipyard phase under Codex — final verification, pre-ship security audit, documentation, and…