Skip to content
Back to skills

Cursor Review

ASecurity

Run a Cursor Composer review as an advisory second opinion while keeping the primary review verdict on the host brain. Use when user invokes cursor:review, asks Cursor to review, or wants composer to sanity-check a diff. Cursor never owns APPROVE/REQUEST_CHANGES.

  • 2 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added September 12, 2026
toolsbashgitbackend

Works with

  • cursor

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 12, 2026

npx -y skills add whyzsm/tiny-agents --skill cursor-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Cursor Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Cursor Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/whyzsm-cursor-review/badge)](https://www.skillsdirectory.com/skills/whyzsm-cursor-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: cursor-review
description: "Run a Cursor Composer review as an advisory second opinion while keeping the primary review verdict on the host brain. Use when user invokes cursor:review, asks Cursor to review, or wants composer to sanity-check a diff. Cursor never owns APPROVE/REQUEST_CHANGES."
description-en: "Run a Cursor Composer review as an advisory second opinion while keeping the primary review verdict on the host brain. Use when user invokes cursor:review, asks Cursor to review, or wants composer to sanity-check a diff. Cursor never owns APPROVE/REQUEST_CHANGES."
description-ja: "Cursor Composer に advisory second opinion としてレビューさせるスキル。cursor:review、Cursor にレビューして、composer で差分を sanity check して、という時に使う。primary verdict は常に host brain が持ち、Cursor は APPROVE/REQUEST_CHANGES を所有しない。"
allowed-tools: ["Read", "Bash", "Grep"]
argument-hint: "[--base <ref>] [review-scope]"
user-invocable: true
---

# cursor:review - Advisory Cursor Review

Cursor Composer (`composer-2.5-fast`) を read-only second opinion として使う review skill。primary verdict は host brain (Opus / Claude role) が出す。

## Quick Reference

```bash
cursor:review --base origin/main
cursor:review "Phase 88.5 command namespace diff"
```

## Rules

- Cursor review is advisory. The final verdict must come from the host reviewer.
- Do not pass `--write` to `cursor-companion.sh`.
- Use resolver/model routing, not direct env checks:

  ```bash
  bash scripts/resolve-impl-backend.sh --backend cursor --role reviewer
  bash scripts/model-routing.sh --host cursor --role worker --field model
  ```

- Prefer the existing `harness-review` contract when a full review is requested. This command exists for users who explicitly ask for the Cursor lane.

## Flow

1. Resolve the Harness helper root:

   ```bash
   HARNESS_PLUGIN_ROOT="${HARNESS_PLUGIN_ROOT:-${CLAUDE_PLUGIN_ROOT:-}}"
   if [ -z "$HARNESS_PLUGIN_ROOT" ] && [ -n "${CLAUDE_SKILL_DIR:-}" ]; then
     probe="$(cd "${CLAUDE_SKILL_DIR}" && pwd)"
     while [ "$probe" != "/" ] && [ ! -d "$probe/scripts" ]; do
       probe="$(cd "$probe/.." && pwd)"
     done
     [ -d "$probe/scripts" ] && HARNESS_PLUGIN_ROOT="$probe"
   fi
   if [ -z "$HARNESS_PLUGIN_ROOT" ]; then
     echo "ERROR: HARNESS_PLUGIN_ROOT is not set and could not be derived from CLAUDE_PLUGIN_ROOT or CLAUDE_SKILL_DIR" >&2
     exit 2
   fi
   ```

2. Determine review scope:

   ```bash
   BASE_REF="${TASK_BASE_REF:-origin/main}"
   REVIEW_SCOPE="${ARGUMENTS:-}"
   if [ -n "${REVIEW_SCOPE}" ]; then
     set -- ${REVIEW_SCOPE}
     while [ "$#" -gt 0 ]; do
       case "$1" in
         --base)
           BASE_REF="${2:?--base requires a ref}"
           shift 2
           ;;
         --base=*)
           BASE_REF="${1#--base=}"
           shift
           ;;
         *)
           shift
           ;;
       esac
     done
   fi
   DIFF_STAT="$(git diff --stat "${BASE_REF}..HEAD")"
   DIFF_TEXT="$(git diff "${BASE_REF}..HEAD")"
   ```

3. Ask Cursor in read-only mode:

   ```bash
   PROMPT="$(cat <<EOF
Review this diff as an advisory second opinion.
Base ref: ${BASE_REF}
Requested scope: ${ARGUMENTS:-full diff}

Focus on bugs, regressions, missing tests, and unsafe assumptions. Do not propose broad refactors.

Diff stat:
${DIFF_STAT}

Diff:
${DIFF_TEXT}
EOF
)"
   bash "${HARNESS_PLUGIN_ROOT}/scripts/cursor-companion.sh" task "${PROMPT}"
   ```

4. Host reads Cursor's output and performs the primary review:

   - Findings first, ordered by severity.
   - Mark Cursor-originated points as advisory when used.
   - `APPROVE` / `REQUEST_CHANGES` must be the host decision, not a copied Cursor verdict.

## Output

Use the standard review shape:

- findings
- open questions
- validation run
- final host verdict

Files in this skill

  • SKILL.md3.8 KB
  • source.json399 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.